TASC (Total Administrative Services Corporation)

• Develop, manage, and close new business opportunities while building a robust pipeline across targeted vertical markets. • Identify high-potential vertical software companies and establish strategic partnerships that accelerate market growth. • Sell embedded payment processing, ledger services, and related financial technology solutions to enterprise clients. • Collaborate with executive leadership to identify and prioritize adjacent markets and new embedded finance opportunities. • Build relationships with executive decision-makers, technical buyers, and strategic partners. • Represent the company as a thought leader at industry events, conferences, and networking opportunities. • Bring the Voice of the Customer and Voice of the Market back to product, strategy, and go-to-market teams to influence future product direction and commercial strategy. • Negotiate creative partnership structures and commercial agreements that create long-term value.

• Administers various contracts (including all varieties of revenue, distribution, vendor/sourcing, special venture or unique business relationships.) • Duties require mitigating risks by understanding the purpose of the contracts, supporting negotiations, preparing correspondence, drafting documents or forms (i.e., redlining) obtaining business acceptance, execution of the forms, maintaining reference documentation and company-wide retention systems • Explain and interpret rules, regulations, policies, and procedures pertaining to contractual agreements and proper processes to follow • Generates, maintains and audits a central contract-resource file; ensuring all records are accurate and up to date • Write supporting letters and other communications or notices related to contracting matters • Analyze contracts to ensure they comply with state and federal laws and regulations. Ensure Enterprise policies are maintained or get approval where deviation has low risk and high value to the Enterprise • Review contract estimates, including proposed materials, costs, etc. and determine whether they seem reasonable and accurate • Establish contract management plans, measure and monitor performance and provide regular reporting • Formulate new processes, policies and procedures related to contract management as needed • Perform additional duties as requested by Supervisor and/or Management

• Take a leading role in securing the systems and data from potential threats or compromise. • Design, implement, and execute systems’ security defenses and capabilities across networks, databases, and internet/web operations. • Develop, implement, and effectively execute the security and monitoring operations. • Investigate security incidents and potential compromises to TCB systems and take actions to protect TCB systems. • Utilize forensic best practices to investigate and maintain evidence integrity. • Oversee and enforce identity and access management controls, including privileged access governance, role-based access reviews, and integration of identity systems with enterprise authentication and authorization frameworks. • Consuming and operationalizing threat intel feeds (threat intelligence integration) to create/improve detection rules and make better risk decisions. • Consult on projects, design reviews, threat modeling sessions, and change board process to provide guidance on security architecture, posture, and/or impact as well as to ensure the integrity of new and/or existing business operations. • Continually evaluate TCB systems exposure to existing threats; including but not limited to reviewing security capabilities and provide advice on mitigating controls. • Consult and provide suggestions to management on security related matters. • Produce security metrics, KPIs, and reporting upwards to management or the board. • Stay informed and tuned to security industry trends, potential threats and vulnerabilities. • Research, evaluate, and make recommendations regarding security trends and innovations. • Evaluate system changes across the organization to assess and document the security risk and impact. • Evaluate third-party tools, vendors, or integrations for security risks. • Review and document policies, standards and procedures to maintain compliance. • Evaluate compliance and contractual requirements relative to systems capabilities. • Provide leadership, expertise and solutions on complex initiatives related to security. • Mentor others and may represent management at times. • Takes a leadership role on highly complex projects and provides guidance to less experienced staff. • Operates within TCB’s guidelines pursuant to the Employee Handbook and all Policies and Procedures. • Perform additional duties as requested by Supervisor and/or Management.

• Deploy and maintain critical applications on cloud-native, distributed, serverless architecture. • Implement automation, observability, monitoring, and infrastructure-as-code. • Manage efficient and reliable CI/CD pipelines across multiple environments to help minimize developer friction. • Design and implement secure automation solutions for development, testing, and production environments. • Implement industry best practices for system hardening and configuration management, in conjunction with the SecOps team. • Improve system reliability through automation, monitoring, and operational best practices. • Sustain and improve the process of knowledge sharing throughout the engineering team. • Support and work alongside a cross-functional engineering team. • Have on call responsibilities in rotation with the engineering team.

• Own day-to-day security operations for AWS-based cloud and serverless workloads including threat detection, alert triage, incident response, forensics, and post-incident learning. • Build and tune detections and automations (SIEM rules, SOAR/runbooks, detection-as-code) to reduce MTTA/MTTR and eliminate noisy alerts. • Secure our delivery pipelines & runtime Harden CI/CD and software supply chain, and drive “secure by default” patterns in our SDLC. • Lead cloud/serverless hardening (IaC reviews, policy-as-code, least privilege IAM design, network segmentation). • Partner with DevOps and Engineering teams to evolve identity & access, endpoint/EDR posture. • Coordinate vulnerability management end-to-end: scanning, prioritization, remediation, and reporting. • Contribute to security governance (policies, standards, tabletop exercises, BCP/DR inputs) and support compliance efforts (e.g., SOC 2/PCI DSS). • Build security tooling and integrations for engineers, acknowledging that ease of use and low friction will encourage adoption and adherence. • Define metrics/KPIs and regularly communicate risk & progress to engineering and leadership. • Mentor engineers on secure design and champion a positive, enablement-first security culture. • Participate in architecture and threat modeling discussions to identify security risks early in the design process.