RRemoteville
Spring Health logoSpring Health

Senior Compliance Specialist II

Skills
AdoptionContinuous ImprovementISO 27001ISO StandardsReadinessRegulatory RequirementsRisk Management Framework
Role

What the job involves

The main requirements, responsibilities and hiring steps.

Requirements

  • Bachelor’s degree plus 7+ years of progressive experience in GRC IT compliance security risk or related fields
  • Experience building or contributing to an AI governance program with familiarity in AI risk frameworks and model risk assessment
  • Strong technical foundation for mapping complex product architecture to compliance requirements and driving independent stakeholder discussions
  • Deep hands-on expertise with SOC 2 HITRUST HIPAA GDPR ISO 27001 ISO 42001 and SOX ITGCs
  • Proven experience leading large-scale audits and certification efforts end-to-end with minimal oversight
  • Strong ability to interpret regulatory requirements and translate them into pragmatic scalable controls
  • Demonstrated track record of influencing cross-functional stakeholders and driving outcomes without formal authority
  • Exceptional written and verbal communication skills with the ability to engage technical teams and executive leadership
  • Highly organized proactive and comfortable operating in ambiguity within a fast-paced environment

Nice to have

  • Strategic
  • Proactive
  • Highly organized
  • Ambiguity-tolerant
  • Cross-functional influence

Day to day

  • Lead the Alma-to-Spring Health compliance integration by mapping controls, tools, vendors, and audit history into a unified program.
  • Own enterprise compliance programs across SOC 2 Type II, HITRUST, HIPAA, GDPR, ISO 27001, ISO 42001, and ITGC-SOX with strong audit readiness and continuous improvement.
  • Build and operationalize AI governance, manage risk assessments and documentation, and advise leadership on evolving AI regulations and vendor compliance.
  • Drive GRC maturity, support cross-functional stakeholders, mentor junior team members, and lead complex customer assurance and external security questionnaire engagements.

Hiring process

  • Apply through Spring Health's application process
  • Recruiter provides more in-depth interview information