Senior Compliance Specialist, Spring Health
$125-138k
+ Equity
Personalised mental healthcare
Open for applications
Personalised mental healthcare
1001+ employees
Open for applications
$125-138k
+ Equity
1001+ employees
Company mission
To eliminate every barrier to mental health.
Role
Who you are
- Bachelor’s degree plus 5+ years of experience in a GRC, IT compliance, security, or risk-focused role
- Hands-on experience supporting audits and assessments aligned to frameworks such as SOC 2, HITRUST, HIPAA, GDPR, ISO 27001, and SOX ITGCs
- Foundational experience supporting Business Continuity and Disaster Recovery (BCDR) activities, including documentation maintenance, testing coordination, and alignment to frameworks such as SOC 2, ISO 27001, and HITRUST
- Working knowledge of control execution, evidence requirements, and audit processes
- Ability to operate independently within defined scope while seeking guidance on complex or novel issues
- Strong organizational skills and attention to detail in managing documentation and deadlines
- Clear written and verbal communication skills, with comfort collaborating across technical and non-technical teams
- Not sure if you meet every requirement? Research shows that women and people from historically underrepresented communities often hesitate to apply for roles unless they meet every qualification compared to other similarly-qualified candidates. At Spring Health, we are committed to fostering a workplace where everyone feels valued, empowered, and supported to Thrive. If this role excites you, we encourage you to apply
What the job involves
- Reporting to the Sr Manager, IT Compliance, the Senior Compliance Specialist will assist with all matters relating to Information Security compliance including SOC 2 Type II, HITRUST, Health Insurance Portability and Accountability Act (HIPAA), General Data Protection Regulation (GDPR), ISO 27001, ISO 42001 and ITGC-SOX. This is a full time position that is fully remote
- Supporting the IT Compliance team with the following responsibilities, but not limited to:
- Support and contribute to established compliance programs including SOC 2 Type II, HITRUST, HIPAA, GDPR, and readiness efforts for ISO 27001, ISO 42001, and ITGC-SOX, under the guidance of senior compliance leadership
- Execute day-to-day audit and assessment activities such as evidence collection, coordination of internal interviews, documentation review, and remediation tracking
- Partner closely with engineering, IT, security, and business teams to validate that controls are implemented and operating as designed
- Assist with third-party risk management and supply chain compliance activities, including vendor due diligence and ongoing monitoring
- Contribute to customer assurance efforts, including drafting questionnaire responses and participating in customer calls alongside more senior compliance team members
- Support the execution and maintenance of Business Continuity and Disaster Recovery plans, including documentation updates and testing coordination
- Operate and maintain the GRC tooling, ensuring evidence is accurate, complete, and audit-ready
- Perform internal control testing and risk assessments, document gaps, and support remediation tracking and follow-up
- Draft and maintain policies, procedures, and SOPs in alignment with established standards and frameworks
- Perform continuous monitoring activities such as access reviews, control testing, and artifact updates
- Escalate risks, blockers, or ambiguity appropriately, providing timely updates and context to senior compliance leadership
- What success looks like:
- Reliable, high-quality execution of assigned compliance activities and audit tasks
- Well-organized, accurate evidence and documentation that requires minimal rework
- Successful support of SOC 2 and HITRUST audits through timely delivery of assigned responsibilities
- Strong working relationships with cross-functional partners built on responsiveness and follow-through
- Demonstrated growth in autonomy, judgment, and ability to handle increasingly complex compliance work over time
Our take
Large companies often provide employees with mental health services, but small businesses find it challenging to offer similar support. Additionally, existing support systems are usually generalised, failing to deliver the personalised mental healthcare that individuals need. To address this gap, Spring Health has developed AI-driven tools for employers to create tailored mental wellness plans for their employees, including treatment options, daily routines, and medication plans based on individual data.
Spring Health has recently expanded its services to the family and pediatric space through the acquisition of Weldon, offering mental wellness guidance to parents. This expansion includes chats with therapists, social workers, and parenting coaches, as well as group support with other parents and access to educational content. By focusing on personalised care, Spring Health aims to enhance mental wellness support for families alongside its existing employee services.
The behavioural health market is projected to grow to $242B by 2027. While many solutions prioritise fast access to therapy or meditation, Spring Health differentiates itself by emphasising the right type of care for each individual. With substantial funding raised, Spring Health is well-positioned to continue its innovative approach to mental health services.
Freddie
Company Specialist at Welcome to the Jungle
Insights
77% employee growth in 12 months
Company
Funding (last 2 of 8 rounds)
Jul 2024
$100m
SERIES E
Apr 2023
$71m
LATE VC
Total funding: $465.1m
Company benefits
- Health, Dental, Vision benefits start on your first day at Spring Health. You and your dependents also receive an individual One Medical account which is valued at $199/year per user. HSA and FSA plans available
- A yearly allotment of no cost visits to the Spring Health network of therapists, coaches, and medication management providers for you and your dependents
- 10 allocated sick days per year
- Flexible paid time off in addition to 12 paid holidays throughout the year
- Access to Gympass, an on-demand virtual benefit that provides wellbeing coaching, and budget management
- Spring Renewal: When you hit your four-year Springaversary, you’ll be awarded a four week, fully paid, sabbatical leave to renew and recharge
- 4-4.5 months of fully paid parental leave
- Spring Health provides team members and their families with sponsored access to Bright Horizons® child care, back-up care, and elder care
- Access to fertility care support through Carrot, in addition to $4,000 reimbursement for related fertility expenses
- Our People team benchmarks all salaries using the Radford Global Compensation Database for technology and life sciences industries. Radford benchmarks salaries with 3,589 global firms, 6.5 million employees, and 98 countries across the globe. We do this to ensure all of our team members are paid equally and competitively
- On top of competitive and benchmarked salary, Spring Health offers incentive pay (based on role), and equity that begins vesting as we celebrate your first year with the company!
- Employer sponsored 401(k) match of up to 2% after 90 days of employment
- Flexible work arrangements: 66% of Spring Health team members work fully remote while 33% work in a hybrid model from our New York City offices
- Focus Fridays: no meetings, no distractions, just time for you to get work done
- Focus Weeks: In Spring 2023, we held our first ever Focus Week, we canceled all non-essential meetings, minimized distractions, and you, our team members, to dive into the key work that gets chopped up or deprioritized during the regular day-to-day. We saw a 36% jump in the average energized score after those five days of flow state work and are finalizing a plan for quarterly Focus Weeks for team members
- Up to $1,000 Professional Development Reimbursement per calendar year
- $200 per year donation matching to support your favorite causes
Company HQ
Flatiron District, New York, NY
Leadership
Adam Chekroud
(Co-Founder & President)Previously President of The Oxford Guild Business Society for 2 years and Researcher at FMRIB Centre - University of Oxford for 1 year.
April Koh
(Co-Founder & CEO)Previously Chief Product Officer & Co-Founder at Spylight for 1 year. Also worked in the Product Management Department at Shazam for 5 months.
Share this job
View 60 more jobs at Spring Health