Role Description As a Data Security & Compliance Consultant, you will be responsible for assessing, designing, implementing, and optimizing data security, governance, and compliance solutions for clients across modern cloud and hybrid environments. This role works closely with business stakeholders, security teams, compliance officers, and IT administrators to protect sensitive information, reduce organizational risk, and support regulatory compliance initiatives. Leveraging Microsoft Purview, you will be responsible for the delivery of: - Data classification - Information protection - Data loss prevention - Insider risk management - Records management - Governance solutions While helping clients establish sustainable operating models, policies, and controls aligned with industry best practices and regulatory requirements. What You Will Do - Lead client engagements focused on data security, governance, compliance, and information protection initiatives. - Assess client environments and identify opportunities to improve data security posture, regulatory compliance, and risk management practices. - Design and implement Microsoft Purview solutions, including Information Protection, Data Loss Prevention (DLP), Data Lifecycle Management, Records Management, Insider Risk Management, and eDiscovery. - Develop data classification and sensitivity labeling strategies to protect sensitive business information across Microsoft 365 environments. - Configure and optimize DLP policies across Exchange Online, SharePoint Online, OneDrive, Microsoft Teams, and endpoint devices. - Conduct data discovery and risk assessments to identify sensitive information, data exposure risks, and compliance gaps. - Facilitate workshops with business and technical stakeholders to gather requirements, define governance models, and develop strategic roadmaps. - Design and implement compliance and governance frameworks aligned with organizational objectives and regulatory requirements. - Support organizations in preparing for Microsoft 365 Copilot and AI adoption through data governance, security, and compliance readiness assessments. - Implement and optimize Data Security Posture Management (DSPM) capabilities to improve visibility into organizational data risks. - Develop policies, standards, procedures, and operational processes that support long-term data governance and compliance objectives. - Collaborate with security, infrastructure, identity, and business teams to integrate data protection controls into broader cybersecurity programs. - Create technical documentation, solution designs, implementation guides, and executive-level presentations. - Deliver knowledge transfer sessions and training to client administrators, security teams, and business stakeholders. - Participate in pre-sales activities, including solution design, client presentations, proposal development, and effort estimation. - Stay current on emerging Microsoft security, compliance, AI governance, and data protection technologies and best practices. - Support managed services engagements through ongoing policy tuning, compliance monitoring, reporting, and continuous improvement initiatives. Qualifications - 5+ years of consulting experience. - 3+ years of hands-on experience with Microsoft Purview technologies. - Proven experience designing and implementing data security, governance, and compliance solutions that address business, regulatory, and operational requirements. - Experience developing and deploying information protection strategies, including data classification, sensitivity labeling, encryption, retention, and records management frameworks. - Understanding of data governance principles, information lifecycle management, privacy requirements, and modern approaches to securing sensitive data in cloud and hybrid environments. - Experience leading workshops, conducting assessments, gathering requirements, and translating business objectives into practical security and compliance solutions. - Strong consulting and client-facing skills, with the ability to build trusted relationships and effectively communicate with technical teams, business stakeholders, and executive leadership. - Excellent written and verbal communication skills, including experience developing technical documentation, executive presentations, strategic roadmaps, and client deliverables. - Familiarity with common Canadian regulatory frameworks. - Relevant Microsoft and related industry certifications. - A passion for helping organizations improve their data security posture, governance maturity, compliance readiness, and AI adoption through modern Microsoft technologies. Benefits - Benefits package. - Dynamic work environment. - Corporate gym discounts. - Wellness day. - Opportunities for growth and training. Diversity, Equity, and Inclusion At MSP Corp, we believe that diversity, equity, and inclusion are essential for fostering a healthy and innovative work environment. We are committed to creating a workplace where everyone, regardless of age, gender, ethnicity, sexual orientation, ability, or any other characteristic, feels valued and respected. We encourage applications from individuals of diverse backgrounds and perspectives and ensure a fair and inclusive recruitment process.

• Lead day-to-day execution of the SOX 404 program across business process controls, ITACs, and Key Reports. • Own the Risk and Control Matrix (RACM) and SOX process flows across areas like revenue recognition, OTC, PTP, financial close, and payroll. • Design and execute SOX testing of design and operating effectiveness. • Evaluate ITACs and Key Reports across SAP, Salesforce, and other in-scope financial systems. • Serve as the primary liaison with external auditors through walkthroughs, interim, and year-end testing. • Identify deficiencies, assess root cause, and drive remediation to closure with process owners. • Rationalize and optimize the control environment, reduce complexity while maintaining audit defensibility. • Bring a builder mindset with a hands-on, roll-up-your-sleeves approach; strong bias for automation and measurable outcomes. • Identify and implement opportunities to automate testing and monitoring using data analytics and AI-enabled tools. • Manage, mentor, and develop a global team including internationally based members. • Support executive reporting on SOX program status for senior leadership and the Audit Committee. • Expand over time into a risk advisory role as the SOX program matures.

Role Description We are looking for a Director of Compliance & Privacy to serve as the operational engine of our compliance and privacy programs as Pomelo Care scales. This is a high-impact, “player-coach” leadership role designed for a seasoned operator who thrives on directly executing across a broad compliance portfolio, from privacy investigations and clinical compliance to the annual audit plan, while helping to keep operations running at the pace of the business. You will act as the critical right hand to the Head of Compliance, managing the daily intake volume, leading complex investigations, and providing the direct day-to-day guidance that unblocks our compliance associates. You will command the organizational authority needed to hold cross-functional teams accountable, ensuring our processes protect our members and enable the business to move fast. This role reports to our Head of Compliance and can be based anywhere in the continental US. What You'll Do - Directly lead and execute the day-to-day operations of the HIPAA privacy program, including personally conducting, documenting, and managing complex breach and privacy incident investigations. - Oversee the state privacy law program (CCPA/CPRA), ensuring data subject access requests (DSARs) and consent management workflows are executed flawlessly. - Manage and triage operational volume, logging into intake tools and Slack channels alongside the team to ensure compliance inquiries and incidents are resolved efficiently. - Provide daily operational guidance and decision-making support to the compliance team, serving as the primary escalation point for ambiguous or complex compliance questions. - Oversee the clinical and regulatory compliance work-stream, managing billing and coding compliance, state licensure, and health plan contractual obligations. - Serve as the primary operational interface with legal and compliance colleagues to translate complex legal requirements into practical, live workflows for our clinical and business partners. - Drive the execution of the annual Compliance Work and Audit Plan to proactively identify, monitor, and remediate potential risks across the business. - Manage and develop direct reports as the compliance organization scales, fostering a high-performing team culture of accountability and mentorship. Qualifications - 7+ years of experience in healthcare compliance or privacy, specifically within a clinical or medical group environment. - Deep expertise in HIPAA and HITECH, strong working knowledge of state privacy laws like CCPA/CPRA. - A proven track record as an investigator, with extensive experience managing complex healthcare compliance and privacy intakes from discovery to final disposition. - A track record of “operationalizing” rules. You don’t just read the law; you build the checklists and workflows that make it work for a busy team. - High empathy for members and care teams, with the ability to communicate complex rules in a clear and supportive way. - A “player-coach” mindset - you have the executive presence to command a room, but you genuinely enjoy doing the tactical work and aren’t afraid to dig into ticketing queues and spreadsheets. - A certification in healthcare compliance (CHC) or privacy (CHPC/CIPP) is strongly preferred. Benefits - Competitive healthcare benefits - Generous equity compensation - Unlimited vacation - Membership in the First Round Network (a curated and confidential community with events, guides, thousands of Q&A questions, and opportunities for 1-1 mentorship) Compensation Our salary ranges are based on paying competitively for our company’s size and industry, and are one part of the total compensation package that also includes equity, benefits, and other opportunities at Pomelo Care. In accordance with New York City, Colorado, California, and other applicable laws, Pomelo Care is required to provide a reasonable estimate of the compensation range for this role. Individual pay decisions are ultimately based on a number of factors, including qualifications for the role, experience level, skillset, geography, and balancing internal equity. Given that this role is open to candidates of different skill levels, determining a salary range is challenging. A reasonable estimate of the current salary range is $180,000-$210,000. We expect most candidates to fall in the middle of the range. We also believe that your personal needs and preferences should be taken into consideration, so we allow some choice between equity and cash. Potential Fraud Warning Please be cautious of potential recruitment fraud. With the increase of remote work and digital hiring, phishing and job scams are on the rise with malicious actors impersonating real employees and sending fake job offers in an effort to collect personal or financial information. Pomelo Care will never ask you to pay a fee or download software as part of the interview process with our company. Pomelo Care will also never ask for your personal banking or other financial information until after you have signed an offer of employment and completed onboarding paperwork that is provided by our People Operations team. All official communication with Pomelo Care People Operations team will come from domain email addresses ending in @pomelocare.com. If you receive a message that seems suspicious, we encourage you to pause communication and contact us directly at careers@pomelocare.com to confirm its legitimacy. For your safety, we also recommend applying only through our official Careers page. If you believe you have been the victim of a scam or identity theft, please contact your local law enforcement agency or another trusted authority for guidance.

Role Description The Regional Compliance Coordinator (RCC) is responsible for ensuring that compliance requirements are met within their assigned region. This includes: - Monitoring federal and state regulations, minimum wage laws, contract and waiver requirements. - Notifying relevant departments of changes. - Serving as the primary point of contact for compliance inquiries within the region. - Overseeing contract reporting and managing policies and procedures (P&Ps). - Maintaining organizational and regulatory standards by coordinating both internal and external audits. - Handling Performance Improvement Plans (PIPs) and Corrective Action Plans (CAPs). - Investigating Fraud, Waste, and Abuse incidents, Privacy and HIPAA related incidents, and other Critical Incidents. - Managing Criminal Background Check (CBC) reviews. Responsibilities and Duties - Continuously monitor federal and state regulations, minimum wage laws, and contract requirements; promptly communicate changes to operations and relevant stakeholders to ensure compliance. - Maintain a compliance alert system or process to track and disseminate updates effectively. - Review and update state-required forms annually or as regulations change; verify accuracy and timely implementation. - Prepare, validate, and submit contract reports for the assigned region, ensuring adherence to contract specifications and deadlines. - Oversee the development, maintenance, and implementation of regional policies and procedures (P&Ps); ensure alignment with corporate standards and regulatory requirements. - Conduct periodic reviews of P&Ps to identify gaps and recommend improvements. - Plan, coordinate, and participate in internal audits to assess compliance with organizational and regulatory standards; document findings and corrective actions. - Serve as the primary liaison for external audits, collaborating with auditors and internal teams to provide required documentation and resolve issues. - Facilitate and monitor Performance Improvement Plans (PIPs) and Corrective Action Plans (CAPs); ensure timely resolution and follow-up reporting. - Investigate and document incidents related to Fraud, Waste, Abuse, Privacy, HIPAA, and other critical compliance matters; recommend preventive measures. - Manage Criminal Background Check (CBC) reviews for all applicable personnel; ensure compliance with state and federal regulations. - Maintain a secure and organized system for compliance-related records to support audits and reporting requirements. - Partner with compliance team members and regional leadership to identify challenges, share best practices, and implement process improvements. - Provide training or guidance to staff on compliance topics as needed. - Perform other duties as assigned to support organizational compliance objectives. - Uphold company mission, values, and ethical standards in all activities. Qualifications - Associate’s degree in business administration or related field preferred. - 3–5 years of compliance-related experience in healthcare, financial services, or a regulated industry. - Proven track record in managing audits, regulatory reporting, and policy implementation. - Strong understanding of compliance principles, regulatory frameworks, and risk management processes. - Ability to interpret and apply federal and state regulations, contract requirements, and organizational policies. - Proficiency in using compliance management systems, databases, and Microsoft Office Suite. - Exceptional organizational and time management skills; ability to prioritize tasks under pressure and meet deadlines. - Advanced written and verbal communication skills for preparing reports, policies, and stakeholder correspondence. - Analytical and problem-solving skills to identify compliance gaps and recommend corrective actions. - High level of confidentiality and integrity in handling sensitive information. - Effective decision-making and critical thinking abilities. - Detail-oriented with a commitment to accuracy and compliance excellence. - Ability to work independently and collaboratively across departments. - Adaptability to changing regulations and organizational priorities. Work Environment - Work is performed from a home office, with occasional travel to corporate offices as needed. Company Description As a family-founded national leader in personal and financial services for individuals who rely on home- and community-based care, GT Independence supports tens of thousands of people across the country as they find and hire their own caregivers or personal assistants. Our compliance team is driven by trust, autonomy, and—yes—fun. We believe great teams come from people who are intrinsically motivated, empowered, and valued. We respect each other, we care about the work we do, and we succeed because we work with purpose. We value excellence, but we won’t micromanage to achieve it. If you are self‑motivated, we give you the space and support to grow and thrive. Team members enjoy flexible paid time off, competitive wages & benefits, and meaningful opportunities for professional growth. Grow your career with us. Grow your impact with us. GT is committed to being a welcoming and inclusive community. We aspire for all staff to feel comfortable bringing their full, authentic selves to work. We want people to feel valued and have a sense of belonging. GT strives to create a workforce that reflects the communities we serve. We recognize that our diversity makes us stronger. It also drives innovation and ultimately helps us achieve our mission of self-determination.