Senior Enterprise Risk Management Specialist

Reporting to the Corporate Compliance Officer and partnering closely with Security, Legal, Operations, and Quality teams, the Senior ERM Specialist will strengthen Spring Health’s enterprise resilience by embedding risk management into daily operations and strategic planning. This role will identify and address enterprise risks across compliance, digital health, cybersecurity, and business continuity, ensuring our frameworks translate into practical, action-oriented solutions. This is a full-time, fully remote position that requires healthcare compliance and Enterprise Risk Management experience.

You will do this by:

• Supporting leadership in operationalizing Spring Health’s risk appetite and tolerance, embedding ERM into strategy-setting, business planning, and decision-making.
• Defining consistent risk criteria (likelihood, impact, velocity, resilience) and maintaining dynamic risk profiles and a portfolio view that adapts to business changes, digital health innovations, and regulatory shifts (ISO & COSO).
• Monitoring internal and external risk indicators, including those specific to behavioral and digital health (e.g., telehealth regulation, data privacy, interoperability).
• Assessing risks tied to significant organizational changes, new initiatives, or market disruptions, ensuring agility and responsiveness (COSO: substantial change; ISO: dynamic).
• Guiding business areas in designing and executing mitigation and business continuity plans, and validating corrective actions through closure for effectiveness and sustainability.
• Preparing clear, decision-oriented reporting for the ERM Committee, senior leadership, and other stakeholders, leveraging risk registers, analytics, and technology platforms.
• Collaborating across Corporate Compliance, Information Security, Quality, and Legal to align ERM with compliance, continuity, and resilience frameworks, and providing a portfolio-level risk view to support governance and oversight.
• Promoting a risk-aware culture aligned with Spring Health’s mission through training and education that incorporate diverse perspectives.
• Continuously reviewing and refining ERM processes to reflect industry best practices, COSO principles, and ISO 31000 standards.
• Performing other related duties to advance enterprise resilience.

• Enterprise risks are consistently identified, assessed, and embedded into business planning and decision-making across all departments.
• Leadership and committees use a clearly defined risk appetite and portfolio view to guide strategic and operational choices.
• Continuity plans are tested, validated, and trusted to mitigate disruptions — from cybersecurity to operational outages.
• Emerging risks in behavioral and digital health (e.g., privacy, interoperability, telehealth compliance) are proactively managed and reported.
• Leaders and staff demonstrate increased ownership of risk, with ERM principles applied in daily operations and governance.

• Bachelor’s degree required; a master’s degree or relevant certifications (e.g., COSO ERM, CRM, PMI-RMP) preferred.
• 5+ years of progressive experience in risk management (8+ preferred).
• Proven success in embedding risk management frameworks into business practices, not just developing them.
• Ability to translate complex risk concepts into actionable strategies that support organizational objectives.
• Familiarity with relevant laws, regulations, and industry standards in risk management, compliance, digital health, and business continuity.
• Strong organizational skills and experience managing complex projects from end to end, with a track record of achieving measurable outcomes.
• Demonstrated ability to work across functions and build strong relationships with senior leaders and operational teams.
• High integrity, professionalism, intellectual curiosity, accountability, and adaptability in a rapidly changing environment.
• Excited to work on a broad variety of risk areas, committed to confidentiality, and open to organizational change and growth.

The target base salary range for this position is $129,000 - $159,350, and is part of a competitive total rewards package including stock options and benefits. Individual pay may vary from the target range and is determined by a number of factors including experience, location, internal pay equity, and other relevant business considerations. We review all employee pay and compensation programs annually using Radford Global Compensation Database at minimum to ensure competitive and fair pay. 

Note: We have even more benefits than listed here and below, your recruiter will provide more in-depth information as you continue in the interview process. Benefits are subject to individual plan requirements and eligibility criteria.

• Health, Dental, Vision benefits start on your first day at Spring. You and your dependents also receive access to One Medical accounts HSA and FSA plans are also available, with Spring contributing up to $1K for HSAs, depending on your plan type.
• Employer sponsored 401(k) match of up to 2% for retirement planning
• A yearly allotment of no cost visits to the Spring Health network of therapists, coaches, and medication management providers for you and your dependents.
• We offer competitive paid time off policies including vacation, sick leave and company holidays.
• At 6 months tenure with Spring, we offer parental leave of 18 weeks for birthing parents and 16 weeks for non-birthing parents.
• Access to Noom, a weight management program—based in psychology, that’s tailored to your unique needs and goals. 
• Access to fertility care support through Carrot, in addition to $4,000 reimbursement for related fertility expenses.
• Access to Wellhub,  which connects employees to the best options for fitness, mindfulness, nutrition, and sleep in one subscription
• Access to BrightHorizons, which provides sponsored child care, back-up care, and elder care
• Up to $1,000 Professional Development Reimbursement a year.
• $200 per year donation matching to support your favorite causes.