Senior Compliance Specialist, Spring Health
Business Resiliency
$125-158.7k
2-3 days a week in office (Embarcadero Ctr, CA)
Personalised mental healthcare
Be an early applicant
Personalised mental healthcare
1001+ employees
Be an early applicant
$125-158.7k
2-3 days a week in office (Embarcadero Ctr, CA)
1001+ employees
Company mission
To eliminate every barrier to mental health.
Role
Who you are
- Bachelor’s degree (or equivalent experience) plus 5+ years in business continuity, disaster recovery, crisis management, technology risk, GRC, IT operations, or related program management, ideally in a regulated and/or healthcare-adjacent environment
- Demonstrated experience running enterprise-wide programs with distributed ownership, where success depends on enabling and coordinating “champions” or delegates across departments rather than doing all execution centrally
- Deep knowledge of BIA, dependency mapping, and RTO/RPO concepts, and how they translate into practical technical and operational runbooks
- Hands-on experience supporting audits or assessments aligned to SOC 2, HITRUST, HIPAA, GDPR, or ISO 27001
- Strong attention to detail with the ability to manage multiple workstreams, evidence collection, and remediation tracking simultaneously
- Nice to Have: CBCP/CBCI or ISO 22301 training; familiarity with cloud/SaaS resilience patterns; experience with GRC tools and Jira/Asana workflows
- Not sure if you meet every requirement? Research shows that women and people from historically underrepresented communities often hesitate to apply for roles unless they meet every qualification compared to other similarly-qualified candidates. At Spring Health, we are committed to fostering a workplace where everyone feels valued, empowered, and supported to Thrive. If this role excites you, we encourage you to apply
What the job involves
- Reporting to the Sr Manager, IT Compliance, the Senior Compliance Specialist, Business Resiliency will support the design, execution, and continuous improvement of Spring Health’s enterprise resilience program
- This role partners cross-functionally across all departments and with key vendors to ensure Spring Health can effectively prepare for, respond to, and recover from disruptive events, while meeting regulatory and customer assurance expectations
- The Senior Compliance Specialist, Business Resiliency ensures annual BCP/DR and Crisis Management planning, testing, training, and reporting are delivered; enables and coordinates Department BCP/DR Champions and application owners to execute continuity activities; and ensures the enterprise structure (governance, standards, catalog management, and evidence readiness) is defined and operating, in a compliance capacity
- Candidates must be based in the San Francisco metro area or able to relocate independently within 90 days of their start date. Occasional travel will be required for team on-sites
- Coordinate and mature the enterprise Business Continuity (BC), Disaster Recovery (DR), and Crisis Management programs, ensuring they are actionable, measurable, and aligned to business risk and member safety
- Serve as the central partner to Department BCP/DR Champions by providing templates, guidance, and "definitions of done" to ensure distributed execution across teams like Engineering, Clinical Operations, and Member Support
- Plan and lead cross-functional exercises, including tabletops, functional drills, and technical DR tests, while documenting success criteria and after-action reports
- Maintain the enterprise BCP/DR catalog for critical applications and business processes (tiering, ownership, dependencies, recovery objectives, artifact status, test history), incorporating updates surfaced by Champions and application owners
- Coordinate the Business Impact Analysis (BIA) and critical service mapping process to keep recovery priorities and minimum service levels aligned to real-world operational impact
- Maintain and test escalation paths, communication workflows, and stakeholder contact mechanisms to ensure alignment with broader incident response practices
- Consolidate findings from drills and incidents into an accountable backlog, driving follow-ups and escalating blockers through governance forums
- Produce leadership reporting on resilience posture (KPIs/KRIs, readiness heatmaps, top risks, testing outcomes, remediation aging), highlighting where Champions/teams need support or prioritization
- Support annual audit readiness for SOC 2 Type II, HITRUST, HIPAA, and ISO 27001 by maintaining control narratives and high-quality evidence discipline
- Contribute to customer assurance efforts, including drafting security questionnaire responses and conducting vendor due diligence or third-party risk monitoring
- Perform internal control testing, such as access reviews and artifact updates, while maintaining GRC tooling to ensure data is accurate and audit-ready
- Draft and maintain policies, procedures, and SOPs in alignment with established enterprise standards and regulatory frameworks
- What success looks like:
- Spring Health builds a demonstrable ability to respond quickly to disruptions while maintaining safe, reliable operations and meeting recovery objectives
- Annual enterprise BCP/DR and Crisis Management exercises are planned, executed, and documented end-to-end (including tabletops, functional continuity drills, and technical DR tests where applicable), with clear success criteria, after-action reporting, and follow-through on improvements
- Departmental Champions are set up for success with a clear operating rhythm, allowing them to maintain artifacts and drills with minimal friction
- Critical P0/P1 services have current, tested runbooks and validated communication paths that reflect business and member impact
- Audit and customer assurance expectations are met efficiently through organized evidence and a clear narrative of how our distributed program operates
- Informed Leadership: Executive leadership has a timely, accurate view of the company’s resilience posture, including readiness heatmaps and top risks
- You demonstrate increasing autonomy and judgment, successfully handling complex compliance work and building strong cross-functional relationships
Our take
Large companies often provide employees with mental health services, but small businesses find it challenging to offer similar support. Additionally, existing support systems are usually generalised, failing to deliver the personalised mental healthcare that individuals need. To address this gap, Spring Health has developed AI-driven tools for employers to create tailored mental wellness plans for their employees, including treatment options, daily routines, and medication plans based on individual data.
Spring Health has recently expanded its services to the family and pediatric space through the acquisition of Weldon, offering mental wellness guidance to parents. This expansion includes chats with therapists, social workers, and parenting coaches, as well as group support with other parents and access to educational content. By focusing on personalised care, Spring Health aims to enhance mental wellness support for families alongside its existing employee services.
The behavioural health market is projected to grow to $242B by 2027. While many solutions prioritise fast access to therapy or meditation, Spring Health differentiates itself by emphasising the right type of care for each individual. With substantial funding raised, Spring Health is well-positioned to continue its innovative approach to mental health services.
Freddie
Company Specialist at Welcome to the Jungle
Insights
77% employee growth in 12 months
Company
Funding (last 2 of 8 rounds)
Jul 2024
$100m
SERIES E
Apr 2023
$71m
LATE VC
Total funding: $465.1m
Company benefits
- Health, Dental, Vision benefits start on your first day at Spring Health. You and your dependents also receive an individual One Medical account which is valued at $199/year per user. HSA and FSA plans available
- A yearly allotment of no cost visits to the Spring Health network of therapists, coaches, and medication management providers for you and your dependents
- 10 allocated sick days per year
- Flexible paid time off in addition to 12 paid holidays throughout the year
- Access to Gympass, an on-demand virtual benefit that provides wellbeing coaching, and budget management
- Spring Renewal: When you hit your four-year Springaversary, you’ll be awarded a four week, fully paid, sabbatical leave to renew and recharge
- 4-4.5 months of fully paid parental leave
- Spring Health provides team members and their families with sponsored access to Bright Horizons® child care, back-up care, and elder care
- Access to fertility care support through Carrot, in addition to $4,000 reimbursement for related fertility expenses
- Our People team benchmarks all salaries using the Radford Global Compensation Database for technology and life sciences industries. Radford benchmarks salaries with 3,589 global firms, 6.5 million employees, and 98 countries across the globe. We do this to ensure all of our team members are paid equally and competitively
- On top of competitive and benchmarked salary, Spring Health offers incentive pay (based on role), and equity that begins vesting as we celebrate your first year with the company!
- Employer sponsored 401(k) match of up to 2% after 90 days of employment
- Flexible work arrangements: 66% of Spring Health team members work fully remote while 33% work in a hybrid model from our New York City offices
- Focus Fridays: no meetings, no distractions, just time for you to get work done
- Focus Weeks: In Spring 2023, we held our first ever Focus Week, we canceled all non-essential meetings, minimized distractions, and you, our team members, to dive into the key work that gets chopped up or deprioritized during the regular day-to-day. We saw a 36% jump in the average energized score after those five days of flow state work and are finalizing a plan for quarterly Focus Weeks for team members
- Up to $1,000 Professional Development Reimbursement per calendar year
- $200 per year donation matching to support your favorite causes
Company HQ
Flatiron District, New York, NY
Leadership
Adam Chekroud
(Co-Founder & President)Previously President of The Oxford Guild Business Society for 2 years and Researcher at FMRIB Centre - University of Oxford for 1 year.
April Koh
(Co-Founder & CEO)Previously Chief Product Officer & Co-Founder at Spylight for 1 year. Also worked in the Product Management Department at Shazam for 5 months.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 65 more jobs at Spring Health