Spring Health
Vice President, US Privacy and Global Data Protection Officer
$236K–$290K
Remote · Remote · Director · Full-time · Posted Aug 5, 2026
- Experience
- 12+ years of legal experience; at least 8 years focused on data privacy, security, and healthcare law.
- Education
- Juris Doctorate (JD) from an accredited law school.
About the job
Leads Spring Health’s US and global privacy and data protection strategy, including privacy governance for healthcare and AI, regulatory compliance, and incident response.
What you'll do
- Lead the privacy legal team and scale the global privacy program and framework.
- Advise on AI and emerging-technology privacy risks; oversee privacy assessments and Privacy by Design in product development.
- Direct data incident response, privacy policies, regulatory obligations, and privacy support for customer contract negotiations.
What they ask for
- Juris Doctorate (JD) from an accredited law school and active membership in at least one state bar.
- 12+ years of legal experience, including at least 8 years focused on data privacy, security, and healthcare law.
- Proven experience leading and scaling privacy teams in a high-growth, global technology environment.
- Expertise in HIPAA/HITECH, GDPR, CCPA/CPRA, and working knowledge of international frameworks such as LGPD or PIPEDA.
Nice to have
- Professional privacy certifications (e.g., CIPP/US, CIPP/E, CIPM, or CIPT).
- Experience navigating AI and machine-learning privacy in a regulated industry.
Pay
$236,250 – $290,000 USD base salary; bonus amount not stated; equity offered
Tools
HIPAA, GDPR, CCPA/CPRA, LGPD, PIPEDA, SOC2 Type II, HITRUST, AI
AI focus
Develop risk-based governance for AI deployment and advise on ethical and regulatory use of AI in clinical settings, including privacy implications of AI and machine learning.
Model-written summary · the original posting is authoritative