Pomelo Care

Build and scale the clinical provider network by managing capacity, utilization, and retention while coordinating teams to support quality care and operational efficiency. | Requires 5+ years in provider network management or operations, preferably telehealth, plus strong analytics and collaboration with clinical, product, and compliance teams. | Pomelo Care is the leading virtual medical practice for women and children, providing care across pregnancy, postpartum, pediatrics, menopause, and perimenopause. We combine proactive, 24/7 clinical care with technology that helps us reach patients earlier, identify risks sooner, and deliver personalized care throughout their journey. Our team includes clinicians, technologists, operators, and problem-solvers working together to make high-quality care more accessible for families nationwide. About The Role We are looking for a Senior Manager of Provider Network Operations to build and scale the clinical network powering Pomelo's new Midlife line of business. In this role, you’ll partner closely with cross-functional teams (Recruiting, Licensing & Credentialing, Product, Clinical Leadership) to build processes, programs and infrastructure to support the growth, utilization, retention and quality of our multi-license-type provider network as volume scales. What you'll do Set and report on network capacity targets; identify and close gaps before they affect patient access Partner with Recruiting, Licensing & Credentialing, and Learning teams to keep time between contract signature & first patient visit efficient as volume scales Own the end-to-end provider relationship, including orientation, utilization, and retention across the network Define and track provider utilization metrics; turn insights into concrete process and/or product fixes Build and run programs (e.g., incentives, community) that keep clinicians actively practicing within the Pomelo network Partner with the Quality team to define what good looks like across the network and translate clinical quality standards into network participation criteria Monitor provider-level quality data (e.g., utilization, patient outcomes, complaints) and drive action on outliers, in partnership with Clinical leadership Support quality-based remediation and, when necessary, contract termination decisions in line with Pomelo's clinical and compliance standards Serve as the connective tissue across Licensing, Credentialing, Quality, Clinical Ops, and Product teams whose work supports the clinical network Build the reporting and dashboards to provide a clear view of network health Represent the provider network in company-wide planning, and flag risks (e.g., capacity gaps, quality issues) before they become urgent Who you are 5+ years of experience in provider network management, provider success/experience, or network operations at a telehealth company Demonstrated ownership over key network metrics, including growth, retention, utilization, and quality Enjoys building net new processes in addition to optimizing existing ones Strong cross-functional communicator, able to work fluidly with Clinical, Product, Compliance, and Commercial teams and translate between them Strong analytical skills, track record of using data to tell a story & prioritize investments Comfortable with ambiguity and early-stage pace Nice to have: experience specifically in women's health or a clinician network involving multiple license types (MDs, NPs, RDs, etc.) Why you should join our team By joining Pomelo, you will get in on the ground floor of a fast-moving, well-funded, and mission-driven startup that always puts the patient first. You will learn, grow and be challenged, and have fun with your team while doing it. Benefits and Perks Comprehensive Health, Dental, and Vision coverage for employees and their families High deductible Health Plans with Health Savings Account (HSA) options Flexible Spending Account (FSA) Equity grant participation 401(k) program Competitive vacation policy 16 weeks paid parental leave Fully remote work flexibility (within the US) with the option to work in person at our NY or SF offices Compensation The expected base salary range offered for this role is $130,000-$150,000. This role is also eligible for equity, giving you an ownership stake in Pomelo’s mission. Actual compensation may vary based on relevant experience, skills, competencies, and certifications. We are committed to hiring the best team to improve outcomes for all mothers and babies. To solve the complex challenges facing the diverse population we serve, we need diverse perspectives, actively welcoming people of all races, ages, sexual orientations, gender identities and expressions, national origins, religions, disabilities, and veteran statuses. We strive to cultivate an inclusive and respectful environment where team members thrive by working across disciplines, moving fast, making data driven decisions, learning continuously, and always putting the patient first.

Lead enterprise security governance, risk, and assurance strategy, manage SOC 2 and HITRUST certification lifecycles, and coordinate security compliance with partners and engineering leadership. | Requires 8+ years in information security, healthcare compliance expertise including HIPAA, cloud technical fluency, successful security certification audit leadership, and a professional certificate. | Pomelo Care is the leading virtual medical practice for women and children, providing care across pregnancy, postpartum, pediatrics, menopause, and perimenopause. We combine proactive, 24/7 clinical care with technology that helps us reach patients earlier, identify risks sooner, and deliver personalized care throughout their journey. Our team includes clinicians, technologists, operators, and problem-solvers working together to make high-quality care more accessible for families nationwide. About The Role: We are looking for a Director of Security Compliance to lead our security governance, risk, and assurance strategy. Reporting to the Head of Compliance, you will be the primary architect of our security governance program and the most senior voice on security oversight, owning the roadmap for our HITRUST and SOC certification lifecycles. This is a hands-on role: in partnership with the Head of Compliance, you will build and run our security compliance program. It is not a software engineering position. You will define our security standards, risk appetite, and compliance requirements, while our engineering team owns technical implementation. Your success will come from setting direction, influencing technical roadmaps, and holding the organization accountable to a security posture that protects our patients and enables the business to move fast. What you’ll do: Define and own the enterprise-wide security strategy and policy framework in partnership with our engineering team and help shape our security risk appetite across all of Pomelo Care. Lead the full lifecycle for SOC 2 Type II and HITRUST certifications, managing external auditors and coordinating internal evidence collection. Own day-to-day security compliance operations, including drafting and maintaining security policies and procedures, access control governance and periodic user access reviews, the annual HIPAA Security Risk Assessment, security awareness training, and ongoing control monitoring. Serve as the security “Design Authority”: setting the governance standards that engineering’s security team builds to. Partner as a peer with engineering leadership to ensure that technical roadmaps align with the enterprise security strategy. Provide governance oversight for technical risk management, ensuring engineering-led solutions meet regulatory and contractual thresholds. Act as the primary security point of contact for our health plan partners, leading security due diligence and representing our program during external audits and questionnaires. Own the security assessment component of our Third-Party Risk Management program ensuring our vendors and partners meet our security and privacy requirements. Own the Incident Response Plan, leading coordination, communication, and the compliance response while engineering handles technical containment and remediation. Report regularly on security risk posture and program maturity to executive leadership. What you’ll bring: 8+ years of experience in Information Security, with at least 3 years in a leadership or GRC-focused role, including direct experience in healthcare, and ideally in a high-growth startup environment. Deep knowledge of HIPAA (particularly the Security Rule) and HITECH, and working knowledge of state privacy and security laws (CCPA/CPRA). Proven track record personally leading successful SOC 2 and HITRUST (i1 or r2) certification cycles from readiness through audit. Technical fluency. You won't be writing code, but you understand cloud environments (GCP preferred), CI/CD pipelines, and modern security tooling well enough to hold a detailed, credible conversation with the engineers who build them. Exceptional communication skills, including the ability to translate complex security concepts into clear, practical guidance for executives, engineers, and business teams, and the ability to represent Pomelo’s security posture to sophisticated external health plan partners. A pragmatic, business-forward approach to security: you right-size controls to actual risk, find paths to yes, and enable the business to move fast without compromising patient trust. Strong project management skills, and a track record of driving cross-functional initiatives across the engineering, product, and operations teams to on-time completion. Preferred certifications: CISSP, CISM, or CISA. A collaborative mindset and a passion for our mission to improve maternal and infant health outcomes. Compensation: The expected base salary range offered for this role is $200,000-$230,000. This role is also eligible for equity, giving you an ownership stake in Pomelo’s mission. Actual compensation may vary based on relevant experience, skills, competencies, and certifications. We are committed to hiring the best team to improve outcomes for all mothers and babies. To solve the complex challenges facing the diverse population we serve, we need diverse perspectives, actively welcoming people of all races, ages, sexual orientations, gender identities and expressions, national origins, religions, disabilities, and veteran statuses. We strive to cultivate an inclusive and respectful environment where team members thrive by working across disciplines, moving fast, making data driven decisions, learning continuously, and always putting the patient first.