Senior Compliance Specialist II

Responsibilities:

• Serve as a primary compliance resource embedded in the Alma-to-Spring Health integration, building a working understanding of Alma's GRC architecture and mapping control environments.
• Own and strategically lead enterprise-level compliance programs including SOC 2 Type II, HITRUST, HIPAA, GDPR, ISO 27001, ISO 42001, and ITGC-SOX from planning through continuous improvement.
• Lead complex risk assessments and translate technical, regulatory, and operational risk into clear, actionable recommendations for leadership.

Qualifications:

• Bachelor’s degree plus 7+ years of progressive experience in GRC, IT compliance, security, risk, or related fields.
• Deep, hands-on expertise with frameworks such as SOC 2, HITRUST, HIPAA, GDPR, ISO 27001, ISO 42001, and SOX ITGCs.
• Proven experience leading large-scale audits and certification efforts end-to-end with minimal oversight.

Benefits:

• Health, Dental, Vision benefits start on your first day, with access to One Medical and HSA/FSA plans with employer contribution.
• Employer sponsored 401(k) match of up to 2% and professional development reimbursement up to $1,000 per year.
• Parental leave of 18 weeks for birthing parents and 16 weeks for non-birthing parents, plus access to fertility care support and child care services.