Opala develops healthcare products that tackle the most complex data challenges faced by payers and providers. As a startup originating from a major healthcare plan in the Northwest, we combine deep health-tech expertise with top-tier data and software engineering talent to create products that our customers find meaningful and valuable. These data products empower payers and their partners to find timely insights and take action to intervene in areas like value-based care analytics, interoperability compliance, and real-time streaming of clinical data. In this remote position, we are seeking a Security & Compliance Manager to lead Opala’s compliance and risk management program in a fast-moving healthcare data startup environment. This role owns our audit roadmap (SOC 2, HIPAA, HITRUST), ensures compliance with regulatory frameworks, and drives customer trust by managing security reviews, vendor assessments, and evidence collection. This role is two-fold. As a strategic leader, you will be guiding our compliance roadmap, managing our MSP (IT + SOC/MDR), and interfacing with auditors. As a hands-on contributor, you will be partnering with engineering squads and our Security & Compliance Team to operationalize evidence gathering and process maturity. Responsibilities: - Own and maintain the company’s Information Security Management System (ISMS). - Lead annual and recurring compliance certifications (SOC 2, HIPAA, HITRUST). - Respond to customer security questionnaires and due diligence requests. - Oversee vendor risk management, including contracts, reviews, and security posture assessments. - Manage MSP performance (IT and SOC/MDR) and ensure evidence feeds align with audit requirements. - Mentor and guide other Engineers and Stakeholders in evidence collection, reporting, and process maturity. - Define, implement, and maintain security policies, standards, and procedures. - Serve as the main point of contact for auditors, regulators, and external security partners. - Report compliance and risk posture to leadership and the board. Minimum Qualifications: - Bachelor’s degree in information security, risk management, or related field (or equivalent experience). - 6+ years of experience in security, compliance, or risk management roles, with 3+ years in a leadership capacity. - 3+ years of vendor management experience. - Experience working with SOC 2, HIPAA, and HITRUST frameworks. - Experience working in a Cloud-based SaaS Platform - Familiarity with healthcare data security and PHI handling. - Experience with Drata's GRC and compliance automation platform - Strong organizational skills and ability to manage multiple audit and certification workstreams. - Excellent written and verbal communication skills, with the ability to translate compliance requirements into clear actions for engineering and business teams. - Hands-on experience modernizing segregation of duties in a highly regulated environment - Hands-on experience integrating Drata with external services: Entra ID, Azure, AWS, etc. - Experience working in sprint-based Agile Development Methodology Preferred Qualifications: - Security certifications such as CISA, CISM, or CISSP. - Experience with NIST 800-53, Cloud Security Alliance (CSA), and Center for Internet Security (CIS) - Experience working in healthcare or other regulated industries. - Exposure to enterprise architecture frameworks such as TOGAF. - Experience building compliance roadmaps in early-stage startups - Exposure to Containerization platforms like Docker, Kubernetes, or VMware Tanzu - Exposure to Serverless platforms like Azure Functions, AWS Lambda - Exposure to Big Data platforms like Hadoop, Databricks, Snowflake, Kafka, Cloudera - Exposure to DevSecOps - Exposure to DevOps Squad Organization Model Benefits: - The Seattle base salary range for this full-time position is $163k-$192k. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. - Benefits include medical, dental, vision, life and AD&D insurance, EAP, short-term and long-term disability, 16 days PTO, 8 paid holidays, fully paid holiday closure, parental and family medical leave, 401k, stock options and annual bonuses and salary increases based on merit. Diversity and Inclusivity Statement: - At Opala, we believe that diversity and inclusivity are critical to our success. We encourage and value diverse perspectives and experiences, and we believe that they are essential for driving innovation and creating products that meet the needs of our diverse customer base.  Opala is an equal opportunity employer and makes employment decisions on the basis of merit. We are committed to providing a workplace free from harassment and discrimination. We celebrate the unique differences of our employees because that is what drives curiosity, innovation, and the success of our business. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, gender identity or expression, age, marital status, veteran status, disability status, pregnancy, parental status, genetic information, political affiliation, or any other status protected by the laws or regulations in the locations where we operate. Accommodations are available for applicants with disabilities.

As Mercury continues to scale, maintaining strong compliance execution and monitoring across customer-facing activities is critical. The Compliance Risk Manager, *Banking Advisory is an experienced individual contributor who supports the Compliance Advisory function through high-quality execution of reviews, monitoring, validation, and documentation under established frameworks. We are seeking a highly motivated compliance professional to join our Compliance Advisory team. In this role, you will work autonomously on regulatory based review and monitoring activities, owning assigned work from start to finish while operating within defined standards, processes, and escalation paths. You will help surface emerging risks, contribute to continuous improvement of monitoring practices, and support team-level goals through disciplined execution and reporting. In this role you will: - Independently execute compliance monitoring and targeted validation activities across defined channels (e.g., customer communications, sales interactions, marketing activity) using approved scripts, sampling approaches, and procedures - Own assigned monitoring and validation work end-to-end, including evidence collection, documentation, follow-ups, and timely completion of deliverables - Identify, document, and classify findings, trends, or repeat observations, and escalate issues appropriately using established escalation paths - Support validation of remediation actions through follow-up testing and confirmation reviews - Prepare clear, accurate summaries of monitoring results to support team-level reporting and Advisory leadership visibility - Execute assigned customer-facing and marketing collateral compliance reviews in accordance with established standards and review criteria - Contribute ideas for improving monitoring efficiency, documentation quality, or review processes within existing team frameworks You should have: - 3+ years of relevant experience in compliance, risk, monitoring, QA, or testing preferably within a FDIC insured bank, but a fintech would also be acceptable - Demonstrated ability to independently execute moderately complex reviews or monitoring activities with minimal day-to-day guidance - Experience applying defined standards, scripts, or criteria to assess customer-facing materials, sales practices, or communications - Strong documentation discipline and attention to detail, with the ability to produce audit-ready evidence - Ability to synthesize review outcomes into clear, structured summaries that support team-level decision-making - Comfort operating in some ambiguity, asking clarifying questions, and escalating issues when guidance or risk tolerance is unclear - A bias for action and accountability, with the ability to manage timelines and deliverables for assigned work independently - Curiosity and willingness to deepen understanding of Mercury products, regulatory requirements, and compliance risk drivers The total rewards package at Mercury includes base salary, equity (stock options), and benefits. Our salary and equity ranges are highly competitive within the SaaS and fintech industry and are updated regularly using the most reliable compensation survey data for our industry. New hire offers are made based on a candidate’s experience, expertise, geographic location, and internal pay equity relative to peers. Our target new hire base salary ranges for this role are the following: - US employees in New York City, Los Angeles, Seattle, or the San Francisco Bay Area: $142,900 - $160,700 - US employees outside of the New York City, Los Angeles, Seattle, or the San Francisco Bay Area: $128,600 - $144,600 - Canadian employees (any location): $135,000 CAD - $151,900 CAD *Mercury is a fintech company, not an FDIC-insured bank. Banking services provided through Choice Financial Group and Column N.A., Members FDIC. Mercury values diversity & belonging and is proud to be an Equal Employment Opportunity employer. All individuals seeking employment at Mercury are considered without regard to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, sexual orientation, or any other legally protected characteristic. We are committed to providing reasonable accommodations throughout the recruitment process for applicants with disabilities or special needs. If you need assistance, or an accommodation, please let your recruiter know once you are contacted about a role. We use Covey as part of our hiring and / or promotional process for jobs in NYC and certain features may qualify it as an AEDT. As part of the evaluation process we provide Covey with job requirements and candidate submitted applications. We began using Covey Scout for Inbound on January 22, 2024. [Please see the independent bias audit report covering our use of Covey for more information.] #LI-DNI

• Lead integrated regulatory and clinical strategy for new products, indications, and lifecycle changes. • Partner with Regulatory Affairs, Clinical, Quality, and Product teams to define evidence requirements and submission pathways. • Support development of submission-ready clinical content and evidence summaries. • Anticipate global regulatory questions and help drive response strategies. • Guide risk-benefit narratives and evidence positioning for product claims and labeling. • Influence portfolio decisions by clarifying regulatory and clinical tradeoffs. • Strengthen cross-functional planning processes and governance across global markets.

Requisition No: 840218 Agency: Commission on Offender Review Working Title: COMMISSION INVESTIGATOR - 78003090 Pay Plan: Career Service Position Number: 78003090 Salary: 41.254.60 Posting Closing Date: 03/19/2026 Total Compensation Estimator Tool COMMISSION INVESTIGATOR - CS FLORIDA COMMISSION ON OFFENDER REVIEW ***INTERNAL OPPORTUNITY *** Anticipated Vacancy The Florida Commission on Offender Review, formerly known as the Florida Parole Commission, is looking to fill the Commission Investigator– CS. The Commission on Offender Review performs a vital role in Florida’s criminal justice system by preserving the autonomy needed in post-release decisions affecting inmates and ex-offenders. The commission functions as a quasi-judicial, decision-making body. Commissioners preside over weekly meetings at the central office in Tallahassee and various other state locations as required by statute. During these public proceedings, the commissioners make a variety of determinations regarding parole and other releases. Previous applicants need not apply. BENEFITS - State Group Health Insurance Coverage through CHP and Blue Cross/Blue Shield - Various plans for dental, vision, and other supplemental insurance options are available. - Annual and Sick Leave benefits. - Ten paid holidays each year. - One Personal Holiday each year. - $25,000 Life Insurance Policy (paid 100% by employer). - Retirement plans that include employer contributions. - Flexible Spending Accounts. - Tuition waivers to attend State of Florida colleges and universities for up to six credit hours per semester. - Seven paid weeks of Maternity Leave, plus two paid weeks of Care and Bonding Leave. DESCRIPTION This position entails travelling to and conducting violation of post-prison supervision hearings, inmate interviews, and clemency investigations within the region. The investigative reports are then provided to the Commissioners of the Florida Commission on Offender Review (FCOR), and in the case of clemency investigations, the Board of Executive Clemency. Please note this may be a telecommuting position. EXAMPLES OF WORK - Conducts probable cause (parole) and final violation hearings for alleged parole, conditional release, conditional medical release, and addiction recovery violators within the jail or prison setting. Provides violators with initial interviews to advise them of the charges, due process rights, and assess the need for appointed legal counsel. If a hearing is requested, schedules the hearing, obtains witness information, issues subpoenas, etc. After the hearing is conducted, types the violation hearing summary, makes a finding, and a recommendation to FCOR Commissioners. Also conducts courtesy interviews and probable cause hearings for other states pursuant to the Interstate Compact Agreement. - Conducts comprehensive confidential clemency investigations for the Board of Executive Clemency for applicants seeking various types of clemency. These investigations provide a broad picture of the applicant's history and activities. - Performs interviews and investigations with prison inmates who are eligible for parole consideration. This includes, but is not limited to, analyzing inmate prison files, interviewing inmates in the Florida prison system, conducting pre-parole investigations, and making a recommendation regarding suitability of proposed release plans. MINIMUM QUALIFICATIONS - A bachelor’s degree from an accredited college or university. - Four years or more of equivalent experience may substitute for a bachelor's degree. KNOWLEDGE, SKILLS, AND ABILITIES - Knowledge of the Criminal Justice System. - Ability to work independently. - Ability to interact with victims/inmates/applicants. - Ability to initiate and conduct interviews and investigations. - Ability to communicate effectively - Ability to multitask. - Ability to write detailed comprehensive reports. - Ability to conduct research, interpret, and analyze official documents. - Computer skills. As part of the interview process, a work sample may be required. Special Notes: BACKGROUND SCREENING REQUIREMENT: It is the policy of the Florida Commission on Offender Review that any applicant being considered for employment must successfully complete a State and National criminal history check as a condition of employment before beginning employment, and also be screened in accordance with the requirements of Chapter 435, F.S., and, if applicable, Chapter 408, F.S. No applicant may begin employment until the background investigation results are received, reviewed, and approved by the Commission. Background investigations shall include, but not be limited to, fingerprinting for State and Federal criminal records checks through the Florida Department of Law Enforcement (FDLE) and Federal Bureau of Investigation (FBI) and may include local criminal history checks through local law enforcement agencies. Also, employees are subject to background re-screening at least every five (5) years.” **NOTE: It is unacceptable to use the statement "See resume" in place of work history. Incomplete applications will not be considered. All responses provided to the qualifying questions for this vacancy advertisement must be verifiable on your State of Florida, Employment Application. Please use complete sentences, correct grammar, and punctuation. The State of Florida is an Equal Opportunity Employer/Affirmative Action Employer, and does not tolerate discrimination or violence in the workplace. Candidates requiring a reasonable accommodation, as defined by the Americans with Disabilities Act, must notify the agency hiring authority and/or People First Service Center (1-866-663-4735). Notification to the hiring authority must be made in advance to allow sufficient time to provide the accommodation. The State of Florida supports a Drug-Free workplace. All employees are subject to reasonable suspicion drug testing in accordance with Section 112.0455, F.S., Drug-Free Workplace Act. VETERANS’ PREFERENCE. Pursuant to Chapter 295, Florida Statutes, candidates eligible for Veterans’ Preference will receive preference in employment for Career Service vacancies and are encouraged to apply. Certain service members may be eligible to receive waivers for postsecondary educational requirements. Candidates claiming Veterans’ Preference must attach supporting documentation with each submission that includes character of service (for example, DD Form 214 Member Copy #4) along with any other documentation as required by Rule 55A-7, Florida Administrative Code. Veterans’ Preference documentation requirements are available by clicking here. All documentation is due by the close of the vacancy announcement.