Security Compliance Director — HITRUST & SOC

Pomelo Care; United States; Remote; USD 200,000 - 230,000; Full time

Benefits offered by this job

Equity

Job summary

Pomelo Care is seeking a Director of Security Compliance to lead governance, risk, and assurance for HIPAA-aligned security across HITRUST and SOC lifecycles.

The role is hands-on in shaping standards while engineering executes technical controls. You will partner with compliance leadership to guide risk appetite, policy, and audits, ensuring patient safety and fast business velocity.

Qualifications

• 8+ years of experience in Information Security, with at least 3 years in a leadership or GRC-focused role.
• Deep knowledge of HIPAA Security Rule and HITECH, and familiarity with state privacy laws (CCPA/CPRA).
• Proven track record leading SOC 2 and HITRUST certification cycles from readiness through audit.
• Technical fluency with cloud environments (GCP preferred), CI/CD pipelines, and modern security tooling.
• Exceptional communication skills to translate security concepts for executives and engineers.
• Preferred certifications: CISSP, CISM, or CISA.
• Collaborative mindset and mission-driven approach to security.

Responsibilities

• Define and own the enterprise-wide security strategy and policy framework with engineering input.
• Lead SOC 2 Type II and HITRUST certifications, coordinating auditors and evidence collection.
• Oversee security operations: policies, access governance, risk assessment, training, and monitoring.
• Serve as the Design Authority for security standards in product roadmaps.
• Ensure alignment of technical roadmaps with enterprise security strategy.
• Provide governance over risk management and regulatory/commercial thresholds.
• Act as security liaison for health plan partners and external audits.
• Oversee Third-Party Risk Management security requirements with vendors.
• Own Incident Response Plan and coordinate compliance remediation with engineering.
• Report security posture and program maturity to executives.

Skills

Information Security

Leadership

Security Governance

Security Strategy

Tools

GCP

CI/CD

Security tooling

Job description

Pomelo Care is seeking a Director of Security Compliance to lead governance, risk, and assurance for HIPAA-aligned security across HITRUST and SOC lifecycles.

The role is hands-on in shaping standards while engineering executes technical controls. You will partner with compliance leadership to guide risk appetite, policy, and audits, ensuring patient safety and fast business velocity.