Director, Compliance and Privacy

About us Pomelo Care is the leading virtual medical practice for women and children, providing care across pregnancy, postpartum, pediatrics, menopause, and perimenopause. We combine proactive, 24/7 clinical care with technology that helps us reach patients earlier, identify risks sooner, and deliver personalized care throughout their journey. Our team includes clinicians, technologists, operators, and problem-solvers working together to make high-quality care more accessible for families nationwide. About The Role: We are looking for a Director of Compliance & Privacy to serve as the operational engine of our compliance and privacy programs as Pomelo Care scales. This is a high-impact, “player-coach” leadership role designed for a seasoned operator who thrives on directly executing across a broad compliance portfolio, from privacy investigations and clinical compliance to the annual audit plan, while helping to keep operations running at the pace of the business. You will act as the critical right hand to the Head of Compliance, managing the daily intake volume, leading complex investigations, and providing the direct day-to-day guidance that unblocks our compliance associates. You will command the organizational authority needed to hold cross-functional teams accountable, ensuring our processes protect our members and enable the business to move fast. This role reports to our Head of Compliance and can be based anywhere in the continental US. What You'll Do: Directly lead and execute the day-to-day operations of the HIPAA privacy program, including personally conducting, documenting, and managing complex breach and privacy incident investigations. Oversee the state privacy law program (CCPA/CPRA), ensuring data subject access requests (DSARs) and consent management workflows are executed flawlessly. Manage and triage operational volume , logging into intake tools and Slack channels alongside the team to ensure compliance inquiries and incidents are resolved efficiently. Provide daily operational guidance and decision-making support to the compliance team, serving as the primary escalation point for ambiguous or complex compliance questions. Oversee the clinical and regulatory compliance work-stream , managing billing and coding compliance, state licensure, and health plan contractual obligations. Serve as the primary operational interface with legal and compliance colleagues to translate complex legal requirements into practical, live workflows for our clinical and business partners. Drive the execution of the annual Compliance Work and Audit Plan to proactively identify, monitor, and remediate potential risks across the business. Manage and develop direct reports as the compliance organization scales, fostering a high-performing team culture of accountability and mentorship. Who You Are: 7+ years of experience in healthcare compliance or privacy, specifically within a clinical or medical group environment. Deep expertise in HIPAA and HITECH, strong working knowledge of state privacy laws like CCPA/CPRA. A proven track record as an investigator, with extensive experience managing complex healthcare compliance and privacy intakes from discovery to final disposition. A track record of “operationalizing” rules. You don’t just read the law; you build the checklists and workflows that make it work for a busy team. High empathy for members and care teams, with the ability to communicate complex rules in a clear and supportive way. A “player-coach” mindset - you have the executive presence to command a room, but you genuinely enjoy doing the tactical work and aren’t afraid to dig into ticketing queues and spreadsheets. A certification in healthcare compliance (CHC) or privacy (CHPC/CIPP) is strongly preferred. Why you should join our team By joining Pomelo, you will get in on the ground floor of a fast-moving, well-funded, and mission-driven startup that always puts the patient first. You will learn, grow and be challenged, and have fun with your team while doing it. We strive to create an environment where employees from all backgrounds are respected. We value working across disciplines, moving fast, data-driven decision making, learning, and always putting the patient first. Benefits and Perks: Comprehensive Health, Dental, and Vision coverage for employees and their families High deductible Health Plans with Health Savings Account (HSA) options Flexible Spending Account (FSA) Equity grant participation 401(k) program Competitive vacation policy 16 weeks paid parental leave Fully remote work flexibility (within the US) Compensation The expected base salary range offered for this role is $180,000-$210,000. This role is also eligible for equity, giving you an ownership stake in Pomelo’s mission. Actual compensation may vary based on relevant experience, skills, competencies, and certifications. At Pomelo, we are committed to hiring the best team to improve outcomes for all mothers and babies, regardless of their background. We need diverse perspectives to reflect the diversity of problems we face and the population we serve. We look to hire people from a variety of backgrounds, including but not limited to race, age, sexual orientation, gender identity and expression, national origin, religion, disability, and veteran status. #LI-Remote Potential Fraud Warning Please be cautious of potential recruitment fraud. With the increase of remote work and digital hiring, phishing and job scams are on the rise with malicious actors impersonating real employees and sending fake job offers in an effort to collect personal or financial information. Pomelo Care will never ask you to pay a fee or download software as part of the interview process with our company. Pomelo Care will also never ask for your personal banking or other financial information until after you have signed an offer of employment and completed onboarding paperwork that is provided by our People Operations team. All official communication with Pomelo Care People Operations team will come from domain email addresses ending in @pomelocare.com. If you receive a message that seems suspicious, we encourage you to pause communication and contact us directly at careers@pomelocare.com to confirm its legitimacy. For your safety, we also recommend applying only through our official Careers page. If you believe you have been the victim of a scam or identity theft, please contact your local law enforcement agency or another trusted authority for guidance.