About Us

Pomelo Care is a multi-disciplinary team of clinicians, engineers and problem solvers who are passionate about improving care for moms and babies. We are transforming outcomes for pregnant people and babies with evidence-based pregnancy and newborn care at scale. Our technology-driven care platform enables us to engage patients early, conduct individualized risk assessments for poor pregnancy outcomes, and deliver coordinated, personalized virtual care throughout pregnancy, NICU stays, and the first postpartum year. We measure ourselves by reductions in preterm births, NICU admissions, c-sections and maternal mortality; we improve outcomes and reduce healthcare spend.

Role Description

Your North Star: Safeguard our data.

We are looking for an Information Security Engineer who is responsible for safeguarding the data of our company. This pivotal role includes but extends beyond the realms of traditional IT and cybersecurity, into the creation, maintenance, and documentation of Information Security Management Systems (ISMS), internal audit procedures in conjunction with our Head of Compliance, penetration testing coordination, vendor auditing, and systematic processes for timely questionnaire completion. As we expand, we anticipate the IT and cybersecurity to split into two separate teams, potentially opening opportunities for leadership roles. This role will report directly to Pomelo's Director of Engineering.

Responsibilities

Manage and maintain the company's fleet of Mac devices, including device configuration/ setup as new employees onboard, software installations, updates (particularly those related to security vulnerabilities), and overall system performance.
Oversee our Mobile Device Management (MDM) software, its associated security policies, and devise strategies for a secure and efficient remote work environment.
Own and manage our compliance automation tooling.
Review, assess, and authorize software such as Chrome extensions and other third-party applications.
Manage Identity and Access Management (IAM) roles in conjunction with the engineering team, ensuring effective access control across the organization.
Write, implement, and maintain ISMS, creating robust security policies and procedures to protect our systems and data under both the HIPAA, SOC2, and HITRUST frameworks.
Conduct and document internal audits, coordinate penetration tests, and audit vendors to evaluate and improve our security posture.
Set up an effective process for completing security questionnaires in a timely manner, also taking the responsibility of filling out these questionnaires.
Collaborate with engineers to advocate and enforce top-tier security practices across our codebase, identifying and rectifying vulnerabilities as needed.
Write scripts and develop tools to automate repetitive tasks and enhance employee productivity and efficiency.
Provide comprehensive technical support to employees, resolving IT and security-related queries and issues, and foster a culture of cybersecurity awareness.

Who you are

Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent work experience.
Proficient with macOS and its associated security protocols and tools.
Experience working with or managing an ISMS.
Familiarity with MDM solutions, IAM role management, system access controls, and the ability to ensure the secure usage of these systems.
Strong scripting abilities to automate repetitive tasks.
Experience in conducting internal audits, coordinating penetration tests, and auditing vendors.
A solid understanding of best security practices in software development, along with the ability to collaborate with engineers to rectify vulnerabilities.
Ability to troubleshoot complex IT and security issues.
Excellent communication skills and the ability to work collaboratively with both technical and non-technical team members.

Bonus points if you have

Experience at an early-stage startup.
Experience in healthcare technology.
A professional certification in Information Security, such as CISSP or CISM.
Familiarity with compliance frameworks such as HITRUST, SOC2, and HIPAA.

Why you should join our team

By joining Pomelo, you will get in on the ground floor of a fast-moving, well-funded, and mission-driven startup where you will have a profound impact on the overall business.

We strive to create an environment where employees from all backgrounds are respected. We value working across disciplines, moving fast, data-driven decision making, learning, and always putting the patient first. We also offer:

Competitive healthcare benefits
Generous equity compensation
Unlimited vacation
Membership in the First Round Network (a curated and confidential community with events, guides, thousands of Q&A questions, and opportunities for 1-1 mentorship)

At Pomelo, we are committed to hiring the best team to improve outcomes for all mothers and babies, regardless of their background. We need diverse perspectives to reflect the diversity of problems we face and the population we serve. We look to hire people from a variety of backgrounds, including but not limited to race, age, sexual orientation, gender identity and expression, national origin, religion, disability, and veteran status.

Our salary ranges are based on paying competitively for our company's size and industry, and are one part of the total compensation package that also includes equity, benefits, and other opportunities at Pomelo Care. In accordance with New York City, Colorado, California, and other applicable laws, Pomelo Care is required to provide a reasonable estimate of the compensation range for this role. Individual pay decisions are ultimately based on a number of factors, including qualifications for the role, experience level, skillset, geography, and balancing internal equity. A reasonable estimate of the current salary range is $120,000-160,000. We expect most candidates to fall in the middle of the range. We also believe that your personal needs and preferences should be taken into consideration, so we allow some choice between equity and cash.

Pomelo Care

New Jobs

Information Security Engineer