Vice President, US Privacy and Global Data Protection Officer

Our mission: e liminating every barrier to mental health. Spring Health is a global mental health company on a mission to eliminate every barrier to mental health. We're building a world where getting support is simple, personal, and built around the person, so care can continue through every job, move, health plan, and life stage. Our AI-native platform helps us deliver personalized support across self-guided tools, coaching, therapy, medication management, and specialty care. With outcomes independently validated by JAMA Network Open and the Validation Institute, Spring Health reaches more than 170 million people worldwide through leading employers, health plans, and partners. As an AI-native company, we believe technology should expand the reach, quality, and humanity of care. Every Spring Health team member is expected to use AI tools thoughtfully, apply human judgment to AI outputs, and keep building AI fluency in ways that support their role and our mission. Spring Health is actively seeking a VP, Privacy Officer to join our team. Reporting to the General Counsel and partnering with the Security, Product, and Engineering teams, the VP, Privacy Officer will own the US and Global privacy strategy and lead our efforts in maintaining the highest standards of data protection. We are looking for a creative problem-solver who can navigate the complex legal and regulatory landscape of a high-growth health tech startup, helping the company make sound, risk-based decisions in the transformational age of AI. This is a full-time, remote-friendly position with a preference for candidates in the NYC area, with periodic travel to our NYC headquarters. What you’ll do Serve as the designated US Privacy and Global Data Protection Officer, providing strategic leadership and vision for the company’s comprehensive privacy and data protection program. Lead and mentor the privacy legal team, including attorneys and privacy paraprofessional, to ensure cohesive US and Global operations. Develop creative and compliant legal strategies to navigate the intersection of healthcare privacy and cutting-edge AI, enabling the business to innovate while managing risk effectively. Architect and scale a comprehensive privacy framework that accommodates Spring Health’s expansion into new international markets while remaining compliant with GDPR, HIPAA, and local regulations. Act as the executive-level advisor on the privacy implications of emerging technologies, including the ethical and regulatory use of AI in clinical settings. Oversee the execution of enterprise-wide privacy risk assessments, ensuring that "Privacy by Design" is a fundamental component of the product development lifecycle. Direct the company’s response strategy for data incidents and breaches, including managing regulatory relationships and notification obligations. Collaborate with the Sales and Customer Success teams to serve as a high-level subject matter expert during complex contract negotiations with Fortune 500 clients. Define and maintain all external and internal privacy policies, ensuring transparency and trust with members, customers, and providers. Partner with the People Team to ensure internal data practices regarding employee information are handled with the same level of rigor as member data. What success looks like in this role Successfully establish a risk-based governance framework for AI deployment that enables product velocity while maintaining strict privacy standards. Achieve 100% completion of annual HIPAA and global privacy training across the enterprise. Reduce privacy-related friction in the sales cycle by maintaining a comprehensive and updated Trust Center/Knowledge Base for customer inquiries. Implement a scalable, automated Privacy Impact Assessment (PIA) workflow. Successfully navigate and document compliance for two new international market entries within the first year. Maintain a zero-finding status on privacy controls during annual SOC2 Type II and HITRUST audits. What you’ll bring Juris Doctorate (JD) from an accredited law school and active membership in at least one state bar. 12+ years of legal experience, with at least 8 years of dedicated focus on data privacy, security, and healthcare law. Proven track record of leading and scaling privacy teams in a high-growth, global technology environment. Deep expertise in HIPAA/HITECH, GDPR, CCPA/CPRA, and a working knowledge of international frameworks like LGPD or PIPEDA. Professional privacy certifications (e.g., CIPP/US, CIPP/E, CIPM, or CIPT). Exceptional communication skills with the ability to translate complex legal requirements into actionable, risk-based business strategies for non-legal stakeholders. Experience navigating the privacy complexities of AI and machine learning in a regulated industry, with a focus on creative problem-solving. A mission-driven mindset with a commitment to removing barriers to mental health through secure and ethical data practices. The target base salary range for this position is $236,250 - $290,000 and is part of a competitive total rewards package including equity and benefits. Individual pay may vary from the target range and is determined by a number of factors including experience, location, internal pay equity, and other relevant business considerations. We review all employee pay and compensation programs annually using Radford Global Compensation Database at minimum to ensure competitive and fair pay. Benefits provided by Spring Health: Note : We have even more benefits than listed here and below, your recruiter will provide more in-depth information as you continue in the interview process. Benefits are subject to individual plan requirements and eligibility criteria. Health, Dental, Vision benefits start on your first day at Spring. You and your dependents also receive access to One Medical accounts HSA and FSA plans are also available, with Spring contributing up to $1K for HSAs, depending on your plan type. Employer sponsored 401(k) match of up to 2% for retirement planning A yearly allotment of no cost visits to the Spring Health network of therapists, coaches, and medication management providers for you and your dependents. We offer competitive paid time off policies including vacation, sick leave and company holidays. At 6 months tenure with Spring, we offer parental leave of 18 weeks for birthing parents and 16 weeks for non-birthing parents. Access to Noom , a weight management program—based in psychology, that’s tailored to your unique needs and goals. Access to fertility care support through Carrot , in addition to $4,000 reimbursement for related fertility expenses. Access to Wellhub , which connects employees to the best options for fitness, mindfulness, nutrition, and sleep in one subscription Access to BrightHorizons , which provides sponsored child care, back-up care, and elder care Up to $1,000 Professional Development Reimbursement a year. $200 per year donation matching to support your favorite causes. Not sure if you meet every requirement? Research shows that women and people from historically underrepresented communities often hesitate to apply for roles unless they meet every qualification compared to other similarly-qualified candidates. At Spring Health, we are committed to fostering a workplace where everyone feels valued, empowered, and supported to Thrive . If this role excites you, we encourage you to apply. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex, marital status, ancestry, disability, genetic information, veteran status, gender identity or expression, sexual orientation, pregnancy, or other applicable legally protected characteristic. We also consider qualified applicants regardless of criminal histories, consistent with applicable legal requirements. Spring Health is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans. If you have a disability or special need that requires accommodation, please let us know.