Senior Compliance Specialist

Spring Health

Senior Compliance Specialist managing compliance integration for Alma's GRC into Spring Health. Leading compliance programs across multiple regulations in a fully remote setting.

Posted 6/23/2026full-timeRemote • 🇺🇸 United StatesSenior💰 $147,800 - $164,000 per yearWebsite

Tech Stack

Tools & technologies

Spring

About the role

Key responsibilities & impact

Serve as a primary compliance resource embedded in the Alma-to-Spring Health integration effort, building a working understanding of Alma's GRC architecture, tooling, vendor relationships, and audit history.
Map Alma's existing control environment against Spring Health's compliance frameworks, identifying gaps, redundancies, and opportunities for harmonization.
Partner with engineering, IT, security, and legal stakeholders across both organizations to facilitate a structured transition of compliance obligations, evidence, and tooling into a unified program.
Own and strategically lead enterprise-level compliance programs, including SOC 2 Type II, HITRUST, HIPAA, GDPR, ISO 27001, ISO 42001, and ITGC-SOX, from planning through execution and continuous improvement.
Develop deep technical knowledge of Spring and Alma product architecture and the unified roadmap to confidently lead customer assurance efforts and external and internal stakeholder engagements including enterprise calls, escalations, and complex security questionnaires.
Lead complex risk assessments and translate technical, regulatory, and operational risk into clear, actionable recommendations for leadership.
Lead the development and operationalization of an AI governance program, establishing policies, risk frameworks, and control standards that address the unique compliance and ethical considerations of AI and ML systems.
Build and maintain AI-specific compliance documentation including AI use registers, model risk assessments, and governance procedures aligned to regulatory expectations.
Conduct compliance vendor reviews with a particular focus on AI vendors, assessing data handling practices, model governance, regulatory alignment, and contractual compliance obligations.
Technical AI skills and abilities to build and integrate AI into team workflows in a structured way, such as building AI-assisted playbooks for evidence collection & review, audit prep, and risk assessment documentation, customer assurance. Evaluate new AI tools and techniques relevant to compliance and GRC work; share learnings with the team and model disciplined adoption.

Requirements

What you’ll need

Bachelor’s degree plus 7+ years of progressive experience in a GRC, IT compliance, security, risk, or related fields.
Experience building or contributing to an AI governance program, including familiarity with AI risk frameworks, model risk assessment, and translating AI-related regulatory requirements into operational controls.
Strong technical foundation for mapping complex product architecture to compliance requirements, including certifications and customer obligations, and driving independent stakeholder discussions.
Deep, hands‑on expertise with frameworks and regulations such as SOC 2, HITRUST, HIPAA, GDPR, ISO 27001, ISO 42001, and SOX ITGCs.
Proven experience leading large‑scale audits and certification efforts end‑to‑end with minimal oversight.
Strong ability to interpret regulatory requirements and translate them into pragmatic, scalable controls.
Demonstrated track record of influencing cross‑functional stakeholders and driving outcomes without formal authority.
Exceptional written and verbal communication skills, with the ability to engage effectively with both technical teams and executive leadership.
Highly organized, proactive, and comfortable operating in ambiguity within a fast‑paced environment.

Benefits

Comp & perks

Health, Dental, Vision benefits start on your first day at Spring. You and your dependents also receive access to One Medical accounts HSA and FSA plans are also available, with Spring contributing up to $1K for HSAs, depending on your plan type.
Employer sponsored 401(k) match of up to 2% for retirement planning
A yearly allotment of no cost visits to the Spring Health network of therapists, coaches, and medication management providers for you and your dependents.
We offer competitive paid time off policies including vacation, sick leave and company holidays.
At 6 months tenure with Spring, we offer parental leave of 18 weeks for birthing parents and 16 weeks for non-birthing parents.
Access to a weight management program—based in psychology, that’s tailored to your unique needs and goals.
Access to fertility care support, in addition to $4,000 reimbursement for related fertility expenses.
Access to Wellhub, which connects employees to the best options for fitness, mindfulness, nutrition, and sleep in one subscription
Access to BrightHorizons, which provides sponsored child care, back-up care, and elder care
Up to $1,000 Professional Development Reimbursement a year.
$200 per year donation matching to support your favorite causes.

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

GRC architectureAI governance programrisk frameworksmodel risk assessmentcompliance documentationaudit preparationrisk assessment documentationAI integrationtechnical compliance mappinglarge-scale audits

Soft Skills

influencing stakeholderswritten communicationverbal communicationorganizational skillsproactive approachoperating in ambiguitycross-functional collaborationleadershipproblem-solvingstrategic thinking

Certifications

SOC 2 Type IIHITRUSTHIPAAGDPRISO 27001ISO 42001SOX ITGCs