Duly Health and Care

Lead enterprise security and GRC functions, manage security specialists, and align cybersecurity strategy with organizational goals. | Over 10 years in information security with leadership experience and deep HIPAA/HITECH knowledge, bachelor's degree required, master's and certifications preferred. | At Duly Health and Care, you are supported to do your best work and make a meaningful impact every day. You will be part of a collaborative, physician-led team that works as one and puts patients at the center of everything we do. With a connected network of providers, care teams, and services across primary and specialty care, surgery centers, imaging, lab, and therapy, you are part of a system designed to deliver high-quality, coordinated care. Together, we create an environment where you can grow, contribute, and help improve the experience and outcomes for every patient we serve. Benefits: • Comprehensive medical, dental, and vision benefits that include healthcare navigation assistance. • Access to a mental health benefit at no cost. • Employer provided life and disability insurance. • $5,250 Tuition Reimbursement per year. • Immediate 401(k) match. • 40 hours paid volunteer time off. • A culture committed to community engagement and social impact. • Up to 12 weeks parental leave at 100% pay and a financial benefit for adoption and surrogacy for non-physician team members once eligibility requirements are met. Title: Director, Information Security & Governance Full-Time | Hybrid Position Summary - We are seeking a dynamic and experienced Director of Cybersecurity to lead our enterprise security program and governance, risk, and compliance (GRC) function. Reporting to the CTO, this leader will be responsible for protecting the confidentiality, integrity, and availability of patient data, clinical systems, and enterprise assets across our large healthcare organization. The Director will serve as a strategic partner to clinical, operational, and IT leadership and ensuring patient/employee data and enterprise assets are effectively protected. Key Responsibilities: Lead, mentor, and develop a team of 5 security architects and specialists, fostering a culture of excellence, accountability, and continuous learning. Define and execute the enterprise cybersecurity strategy in alignment with organizational goals and the CISO's vision. Oversee security architecture design and review for enterprise systems, clinical applications, cloud environments, and third-party integrations. Drive the maturation of security operations including threat detection, incident response, and vulnerability management programs. Serve as a primary escalation point and decision-maker during significant security incidents or breaches. Own and evolve organizations Governance, Risk & Compliance (GRC) program, ensuring alignment with HIPAA, HITECH, NIST CSF, SOC 2, and other applicable frameworks. Lead risk assessment processes including third-party vendor risk assessments, enterprise risk registers, and ongoing risk treatment planning. Oversee preparation for and response to regulatory audits, assessments, and examinations. Develop, maintain, and enforce enterprise security policies, standards, and procedures. Coordinate privacy and security initiatives in partnership with Legal, Compliance, and Privacy Office stakeholders. Partner with clinical informatics, revenue cycle, HR, and other business units to embed security practices into workflows and new initiatives. Present security risk posture, program metrics, and GRC status updates to executive leadership and the Board of Directors as needed. Lead security awareness and training programs across the organization. Evaluate and guide investment in security tooling including SIEM, EDR, CASB, DLP, identity governance, and zero trust capabilities. Ensure robust identity and access management controls across EHR systems, cloud platforms, and enterprise applications. Stay current on emerging threats specific to the healthcare sector (ransomware, medical device vulnerabilities, supply chain risks) and adapt program accordingly. Qualifications: Required 10+ years of progressive experience in information security, with at least 3 years in a leadership role managing a team. Demonstrated expertise in GRC — including policy development, risk management, and regulatory compliance. Deep knowledge of healthcare-specific security and privacy regulations, particularly HIPAA/HITECH. Experience in large, complex enterprise environments; healthcare industry experience strongly preferred. Proven ability to build trusted relationships with executive stakeholders and communicate risk in business terms. Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or a related field (or equivalent experience). Preferred: Master's degree in a relevant discipline. Active certifications such as CISSP, CISM, CRISC, HCISPP, or equivalent. Hands-on experience with EHR platforms (Epic, Cerner) and their security architecture. If you are committed to putting our patients first and helping shape the future of care, you belong at Duly. The compensation for this role includes a base pay range of $140,000 - $180,000, with the actual pay determined by factors such as skills, experience, education, certifications, geographic location, and internal equity. Additional compensation may be available through shift differentials, bonuses, and other incentives. Base pay is only a portion of the total rewards package. Let’s start with what matters. People. Purpose. Care. At Duly Health and Care, we believe healthcare works best when it’s personal, connected, and led by people who truly care. We are a physician-led medical group built on trusted relationships, teamwork, and a shared commitment to putting patients first in every decision we make. Our team members are caregivers, collaborators, problem-solvers, and leaders. Together, we show up with compassion, act with purpose, and take ownership of the care we deliver and the experience we create. Whether you’re caring directly for patients or supporting the teams who do, your role matters here, and your voice is valued. We listen with intention, work as one, and challenge ourselves to keep improving, not for recognition, but because our patients, families, and communities count on us. Innovation at Duly isn’t about chasing what’s next for its own sake. It’s about finding better ways to deliver high-quality, affordable, and accessible care, today and into the future. If you’re looking for meaningful work, supportive teammates, and the opportunity to help shape the future of care while staying grounded in compassion and community, you’ll find your place at Duly. Current Duly Health and Care team members: Please do not apply through this external site. To be considered, log in to Workday through the OneDuly intranet and click on Career Opportunities to apply. This ensures your application is reviewed appropriately. If you have questions, please connect with your leader or HR Business Partner for support.

Engage patients to schedule appointments, handle inbound calls, resolve barriers to care, coordinate logistics, and ensure HIPAA compliance. | High school diploma or GED, 2-3 years collections call center or accounts receivable experience, strong communication and negotiation skills, and ability to meet performance metrics. | Overview Patient Access Conversion Specialist Locations: Bolingbrook, IL. Full-Time, M-F 8:30am-5pm Good enough isn’t for us. Duly Health and Care’s team members show up every day driven to exceed expectations. We see and support the remarkable in every person within and beyond the walls of our work. Duly Health and Care works to understand what matters most to you. We recruit and retain team members who share a relentless passion and pride for helping others live happier and healthier lives. We invest in helping our team members develop their talents in a way that is rich in personal meaning. We invite you to join us, fulfill your purpose and make your mark! Holistic benefits designed to help our team members flourish in all aspects of their lives, including: • Comprehensive medical and prescription drug benefits that include medical coverage at 100% (after deductible) when utilizing a Duly provider. • $5,250 Tuition Reimbursement per year. • 40 hours paid volunteer time off. • A culture committed to Diversity, Equity, and Inclusion (DEI) and Social Impact • Wellness program that includes complimentary subscriptions to Noom and Calm apps. • 12 Weeks parental leave at 100% pay and a financial benefit for adoption and surrogacy for non-physician team members. • 401(k) Match • Profit-sharing program Responsibilities • Engage with patients proactively to schedule critical appointments and ensure timely follow-up with patients. • Identify and address barriers to care through engaging conversations with patients to better understand and resolve challenges in accessing healthcare. • Receive inbound calls and provide seamless customer service, scheduling appointments or handling inquiries efficiently. • Follow the approved script when discussing health risk evaluations with potential members, ensure members understand and are comfortable with the terms of the evaluation. • Present a positive and professional face to clients, health plan members, and workforce • Coordinate resources and logistics, such as transportation and specialist referrals, ensuring that every detail of the patient’s care journey is smooth and well-managed. • Ensure appointment retention by sending reminders and facilitating follow-ups for continued care. • Collaborate with clinical teams to coordinate specialist referrals, screenings, and follow-up care for patients. • Adjust and reschedule appointments as needed, ensuring accurate and timely communication to internal teams. • Adhere to established procedures and guidelines to ensure that all patient information is handled accurately and according to HIPAA standards, ensuring consistency and security in scheduling practices. Qualifications • High school diploma or GED • 2-3 years of experience in collections call center or accounts receivable role, with a proven record of managing billing inquiries, handling overdue accounts; experience in negotiating and addressing client’s concerns and barriers to provide payment • Previous experience in a role providing outbound calls to clients, and a proven ability to independently problem solve and offer appropriate solutions to yield results • Prior experience in fast-paced environments where ability to influence decision-making and motivate individuals toward action were instrumental in meeting metrics • Experience working with performance metrics (such as call resolution rates, conversion rates, and customer satisfaction scores) • Strong communication skills and the ability to navigate challenging conversations are essential; the ideal candidate should have experience successfully turning difficult interactions into positive outcomes The compensation for this role includes a base pay range of $16.30-24.50/hour, with the actual pay determined by factors such as skills, experience, education, certifications, geographic location, and internal equity. Additional compensation may be available through shift differentials, bonuses, and other incentives. Base pay is only a portion of the total rewards package