RRemotevilleRemote roles worth applying for.

How Remoteville checks and expires listings

Senior Compliance Specialist II

Skills
AdoptionContinuous ImprovementISO 27001ISO StandardsReadinessRegulatory RequirementsRisk Management Framework
Role

What the job involves

The main requirements, responsibilities and hiring steps.

Requirements

  • Bachelor’s degree plus 7+ years of progressive experience in GRC IT compliance security risk or related fields
  • Experience building or contributing to an AI governance program and familiarity with AI risk frameworks
  • Strong technical foundation for mapping product architecture to compliance requirements and customer obligations
  • Deep hands-on expertise with SOC 2 HITRUST HIPAA GDPR ISO 27001 ISO 42001 and SOX ITGCs
  • Proven experience leading large-scale audits and certification efforts end-to-end with minimal oversight
  • Strong ability to interpret regulatory requirements and translate them into scalable controls
  • Demonstrated track record of influencing cross-functional stakeholders without formal authority
  • Exceptional written and verbal communication skills with technical teams and executive leadership
  • Highly organized proactive and comfortable operating in ambiguity in a fast-paced environment

Nice to have

  • Proactive
  • Highly organized
  • Comfortable with ambiguity
  • Cross-functional influence

Day to day

  • Serve as a primary compliance resource during the Alma-to-Spring Health integration, learning existing GRC tools and control environments
  • Map control frameworks, identify gaps and redundancies, and help unify compliance processes and tooling across both organizations
  • Lead enterprise compliance programs and AI governance initiatives, translating regulatory obligations into practical controls and audit-ready documentation