Senior Compliance Specialist II
Skills
AdoptionContinuous ImprovementISO 27001ISO StandardsReadinessRegulatory RequirementsRisk Management Framework
What the job involves
The main requirements, responsibilities and hiring steps.
Requirements
- Bachelor’s degree plus 7+ years of progressive experience in GRC IT compliance security risk or related fields
- Experience building or contributing to an AI governance program and familiarity with AI risk frameworks
- Strong technical foundation for mapping product architecture to compliance requirements and customer obligations
- Deep hands-on expertise with SOC 2 HITRUST HIPAA GDPR ISO 27001 ISO 42001 and SOX ITGCs
- Proven experience leading large-scale audits and certification efforts end-to-end with minimal oversight
- Strong ability to interpret regulatory requirements and translate them into scalable controls
- Demonstrated track record of influencing cross-functional stakeholders without formal authority
- Exceptional written and verbal communication skills with technical teams and executive leadership
- Highly organized proactive and comfortable operating in ambiguity in a fast-paced environment
Nice to have
- Proactive
- Highly organized
- Comfortable with ambiguity
- Cross-functional influence
Day to day
- Serve as a primary compliance resource during the Alma-to-Spring Health integration, learning existing GRC tools and control environments
- Map control frameworks, identify gaps and redundancies, and help unify compliance processes and tooling across both organizations
- Lead enterprise compliance programs and AI governance initiatives, translating regulatory obligations into practical controls and audit-ready documentation