Vice President, US Privacy and Global Data Protection Officer - Spring Health

Spring Health is a global mental health company on a mission to eliminate every barrier to mental health. We're building a world where getting support is simple, personal, and built around the person, so care can continue through every job, move, health plan, and life stage. Our AI-native platform helps us deliver personalized support across self-guided tools, coaching, therapy, medication management, and specialty care. With outcomes independently validated by JAMA Network Open and the Validation Institute, Spring Health reaches more than 170 million people worldwide through leading employers, health plans, and partners. As an AI-native company, we believe technology should expand the reach, quality, and humanity of care. Every Spring Health team member is expected to use AI tools thoughtfully, apply human judgment to AI outputs, and keep building AI fluency in ways that support their role and our mission.

Spring Health is actively seeking a VP, Privacy Officer to join our team. Reporting to the General Counsel and partnering with the Security, Product, and Engineering teams, the VP, Privacy Officer will own the US and Global privacy strategy and lead our efforts in maintaining the highest standards of data protection. We are looking for a creative problem-solver who can navigate the complex legal and regulatory landscape of a high-growth health tech startup, helping the company make sound, risk-based decisions in the transformational age of AI. This is a full-time, remote-friendly position with a preference for candidates in the NYC area, with periodic travel to our NYC headquarters.

What you’ll do

• Serve as the designated US Privacy and Global Data Protection Officer, providing strategic leadership and vision for the company’s comprehensive privacy and data protection program.
• Lead and mentor the privacy legal team, including attorneys and privacy paraprofessional, to ensure cohesive US and Global operations.
• Develop creative and compliant legal strategies to navigate the intersection of healthcare privacy and cutting-edge AI, enabling the business to innovate while managing risk effectively.
• Architect and scale a comprehensive privacy framework that accommodates Spring Health’s expansion into new international markets while remaining compliant with GDPR, HIPAA, and local regulations.
• Act as the executive-level advisor on the privacy implications of emerging technologies, including the ethical and regulatory use of AI in clinical settings.
• Oversee the execution of enterprise-wide privacy risk assessments, ensuring that "Privacy by Design" is a fundamental component of the product development lifecycle.
• Direct the company’s response strategy for data incidents and breaches, including managing regulatory relationships and notification obligations.