Senior Compliance Specialist, Spring Health
$147-164k
+ equity
Senior and Expert level
Remote from US
Personalised mental healthcare
Be an early applicant
Personalised mental healthcare
1001+ employees
B2BEnterpriseMental healthMachine LearningSaaS
Be an early applicant
$147-164k
+ equity
Senior and Expert level
Remote from US
1001+ employees
B2BEnterpriseMental healthMachine LearningSaaS
Company mission
To eliminate every barrier to mental health.
Role
Who you are
- Bachelor’s degree plus 7+ years of progressive experience in a GRC, IT compliance, security, risk, or related fields
- Experience building or contributing to an AI governance program, including familiarity with AI risk frameworks, model risk assessment, and translating AI-related regulatory requirements into operational controls
- Strong technical foundation for mapping complex product architecture to compliance requirements, including certifications and customer obligations, and driving independent stakeholder discussions
- Deep, hands‑on expertise with frameworks and regulations such as SOC 2, HITRUST, HIPAA, GDPR, ISO 27001, ISO 42001, and SOX ITGCs
- Proven experience leading large‑scale audits and certification efforts end‑to‑end with minimal oversight
- Strong ability to interpret regulatory requirements and translate them into pragmatic, scalable controls
- Demonstrated track record of influencing cross‑functional stakeholders and driving outcomes without formal authority
- Exceptional written and verbal communication skills, with the ability to engage effectively with both technical teams and executive leadership
- Highly organized, proactive, and comfortable operating in ambiguity within a fast‑paced environment
- If this role excites you, we encourage you to apply
What the job involves
- Reporting to the Sr Manager, IT Compliance, this Senior Compliance Specialist II joins Spring Health at a pivotal moment: the active integration of Alma, a recently acquired organization, into a unified compliance program
- In the near term, this role will focus on learning Alma’s GRC tools and control environment, mapping them against Spring Health’s existing frameworks, and helping build a consolidated compliance organization
- Longer term, this person will own and lead enterprise compliance programs across SOC 2 Type II, HITRUST, HIPAA, GDPR, ISO 27001, ISO 42001, and ITGC-SOX. This is a full time position that is fully remote. Travel is limited
- Serve as a primary compliance resource embedded in the Alma-to-Spring Health integration effort, building a working understanding of Alma's GRC architecture, tooling, vendor relationships, and audit history
- Map Alma's existing control environment against Spring Health's compliance frameworks, identifying gaps, redundancies, and opportunities for harmonization
- Partner with engineering, IT, security, and legal stakeholders across both organizations to facilitate a structured transition of compliance obligations, evidence, and tooling into a unified program
- Communicate integration status, risk findings, and program recommendations clearly to senior compliance leadership throughout the transition
- Own and strategically lead enterprise-level compliance programs, including SOC 2 Type II, HITRUST, HIPAA, GDPR, ISO 27001, ISO 42001, and ITGC-SOX, from planning through execution and continuous improvement
- Lead complex risk assessments and translate technical, regulatory, and operational risk into clear, actionable recommendations for leadership
- Provide strategic insights and regular updates to leadership, including risk trends, audit readiness, compliance metrics, and recommendations for investment or prioritization
- Lead the development and operationalization of Spring Health's AI governance program, establishing policies, risk frameworks, and control standards that address the unique compliance and ethical considerations of AI and ML systems
- Build and maintain AI-specific compliance documentation including AI use registers, model risk assessments, and governance procedures aligned to regulatory expectations
- Monitor the evolving global AI regulatory landscape (EU AI Act, NIST AI RMF, and others) and proactively advise leadership on impact to Spring Health's operations and product roadmap
- Conduct compliance vendor reviews with a particular focus on AI vendors, assessing data handling practices, model governance, regulatory alignment, and contractual compliance obligations
- Drive maturity of the GRC program and tooling, establishing best practices, improving automation and reporting, and ensuring high-quality, audit-ready evidence across the organization
- Integrate AI into team workflows in a structured way, such as building AI-assisted playbooks for evidence review, audit prep, and risk assessment documentation
- Evaluate new AI tools and techniques relevant to compliance and GRC work; share learnings with the team and model disciplined adoption
- Establish quality standards for AI-assisted compliance work across the team, ensuring outputs meet the rigor and auditability expected of regulated deliverables
- Mentor and guide more junior compliance team members, setting standards for quality, rigor, and professionalism across compliance deliverables
- Lead customer assurance and external stakeholder engagements for high-stakes or complex inquiries, including enterprise customer calls, escalations, and detailed security questionnaires
- What success looks like:
- Smooth execution of the Alma compliance integration, with a documented control mapping, unified tooling plan, and clear transition milestones delivered to leadership
- Strong working relationships established across both the Alma and Spring Health compliance functions, with a shared understanding of processes, tools, and priorities
- A clear path to a unified compliance organization. Gaps identified, redundancies resolved, and a roadmap in place for a consolidated program
- Successful execution and continuous improvement of SOC 2, HITRUST, ISO 27001/42001, and SOX programs with minimal audit findings and efficient remediation cycles
- A functioning internal AI governance program with foundational policies, risk assessments, and controls in place for key AI systems
- Strong cross‑functional partnerships, where compliance is viewed as a trusted advisor and enabler, not a blocker
Our take
Large companies often provide employees with mental health services, but small businesses find it challenging to offer similar support. Additionally, existing support systems are usually generalised, failing to deliver the personalised mental healthcare that individuals need. To address this gap, Spring Health has developed AI-driven tools for employers to create tailored mental wellness plans for their employees, including treatment options, daily routines, and medication plans based on individual data.
Spring Health has recently expanded its services to the family and pediatric space through the acquisition of Weldon, offering mental wellness guidance to parents. This expansion includes chats with therapists, social workers, and parenting coaches, as well as group support with other parents and access to educational content. By focusing on personalised care, Spring Health aims to enhance mental wellness support for families alongside its existing employee services.
The behavioural health market is projected to grow to $242B by 2027. While many solutions prioritise fast access to therapy or meditation, Spring Health differentiates itself by emphasising the right type of care for each individual. With substantial funding raised, Spring Health is well-positioned to continue its innovative approach to mental health services.
Freddie
Company Specialist at Welcome to the Jungle
Insights
Led by a woman
Top investors
77% employee growth in 12 months
Company
Funding (last 2 of 8 rounds)
Jul 2024
$100m
SERIES E
Apr 2023
$71m
LATE VC
Total funding: $465.1m
Company benefits
- Health, Dental, Vision benefits start on your first day at Spring Health. You and your dependents also receive an individual One Medical account which is valued at $199/year per user. HSA and FSA plans available
- A yearly allotment of no cost visits to the Spring Health network of therapists, coaches, and medication management providers for you and your dependents
- 10 allocated sick days per year
- Flexible paid time off in addition to 12 paid holidays throughout the year
- Access to Gympass, an on-demand virtual benefit that provides wellbeing coaching, and budget management
- Spring Renewal: When you hit your four-year Springaversary, you’ll be awarded a four week, fully paid, sabbatical leave to renew and recharge
- 4-4.5 months of fully paid parental leave
- Spring Health provides team members and their families with sponsored access to Bright Horizons® child care, back-up care, and elder care
- Access to fertility care support through Carrot, in addition to $4,000 reimbursement for related fertility expenses
- Our People team benchmarks all salaries using the Radford Global Compensation Database for technology and life sciences industries. Radford benchmarks salaries with 3,589 global firms, 6.5 million employees, and 98 countries across the globe. We do this to ensure all of our team members are paid equally and competitively
- On top of competitive and benchmarked salary, Spring Health offers incentive pay (based on role), and equity that begins vesting as we celebrate your first year with the company!
- Employer sponsored 401(k) match of up to 2% after 90 days of employment
- Flexible work arrangements: 66% of Spring Health team members work fully remote while 33% work in a hybrid model from our New York City offices
- Focus Fridays: no meetings, no distractions, just time for you to get work done
- Focus Weeks: In Spring 2023, we held our first ever Focus Week, we canceled all non-essential meetings, minimized distractions, and you, our team members, to dive into the key work that gets chopped up or deprioritized during the regular day-to-day. We saw a 36% jump in the average energized score after those five days of flow state work and are finalizing a plan for quarterly Focus Weeks for team members
- Up to $1,000 Professional Development Reimbursement per calendar year
- $200 per year donation matching to support your favorite causes
Company HQ
Flatiron District, New York, NY
Leadership
Adam Chekroud
(Co-Founder & President)Previously President of The Oxford Guild Business Society for 2 years and Researcher at FMRIB Centre - University of Oxford for 1 year.
April Koh
(Co-Founder & CEO)Previously Chief Product Officer & Co-Founder at Spylight for 1 year. Also worked in the Product Management Department at Shazam for 5 months.
Share this job
View 26 more jobs at Spring Health