Senior Compliance Specialist

Job Summary

Focused on the integration of compliance frameworks, the full-time remote Senior Compliance Specialist II will manage the transition of Alma's GRC tools into Spring Health's compliance programs, oversee enterprise-level compliance initiatives, and lead the development of an AI governance program.

Key responsibilities

• Serve as the primary compliance resource for the Alma-to-Spring Health integration, mapping existing controls and identifying gaps
• Own and lead enterprise compliance programs across SOC 2 Type II, HITRUST, HIPAA, GDPR, ISO 27001, ISO 42001, and ITGC-SOX
• Develop and operationalize an AI governance program, establishing policies and frameworks that address compliance and ethical considerations of AI systems

Required qualifications

• Bachelor's degree plus 7+ years of experience in GRC, IT compliance, security, risk, or related fields
• Experience in building or contributing to an AI governance program, including familiarity with AI risk frameworks
• Deep expertise with compliance frameworks such as SOC 2, HITRUST, HIPAA, GDPR, ISO 27001, ISO 42001, and SOX ITGCs
• Proven experience leading large-scale audits and certification efforts with minimal oversight
• Strong ability to interpret regulatory requirements and translate them into scalable controls