Pomelo Care
Director of Security Compliance
$200K–$230K
United States · Remote · Director · Full-time · Posted Oct 9, 2026
- Experience
- 8+ years in Information Security, including at least 3 years in a leadership or GRC-focused role; direct healthcare experience required.
About the job
Leads Pomelo Care’s security governance, risk, and compliance program, including security strategy and SOC 2 and HITRUST certification lifecycles.
What you'll do
- Set enterprise security strategy, policies, standards, and risk appetite in partnership with engineering.
- Lead SOC 2 Type II and HITRUST certifications, external audits, and day-to-day security compliance operations.
- Oversee security risk, third-party assessments, incident response compliance, and reporting to executives and health plan partners.
What they ask for
- 8+ years in Information Security, including at least 3 years in a leadership or GRC-focused role and direct healthcare experience.
- Deep knowledge of HIPAA (particularly the Security Rule) and HITECH; working knowledge of state privacy and security laws (CCPA/CPRA).
- Personally led successful SOC 2 and HITRUST (i1 or r2) certification cycles from readiness through audit.
- Technical fluency with cloud environments, CI/CD pipelines, and modern security tooling.
Nice to have
- High-growth startup experience.
- CISSP, CISM, or CISA certification.
Pay
$200,000-$230,000 USD base salary
Tools
GCP, CI/CD
Model-written summary · the original posting is authoritative