• Conduzir e apoiar auditorias internas e externas, incluindo, BACEN, SOX, PCI-DSS e ISO27001. • Gerenciar e acompanhar planos de ação para correção de não conformidades e gaps identificados. • Suportar os processos de compliance regulatório e normativo, garantindo aderência às exigências aplicáveis. • Desenvolver, revisar e manter políticas, padrões e procedimentos de segurança da informação. • Trabalhar em conjunto com diversas áreas, incluindo times técnicos e de negócios, para fortalecer os controles internos e a governança de segurança. • Ser a interface com outras entidades do grupo, inclusive em interações internacionais.

• Participates in maintaining and evolving the compliance program framework, including designing and developing policies, standards, and procedures. • Facilitates and performs 2nd Line of Defense control testing and validation • Facilitates compliance operations including User Access Reviews, Due Diligence Questionnaires, and Issues Management. • Consults with cross-functional and security teams to implement policies and procedures as well as assess data privacy and security risks, to mitigate potential compliance issues. • Contributes to the maintenance and continuous improvement of the overall security compliance posture of AuditBoard. • Interfaces and collaborates with security and legal teams on compliance issues • Participates in security compliance assessments • Assists in providing responses to customer and vendor questionnaires • Facilitates training, awareness, and communication of security and compliance matters across AuditBoard; • Participates in developing and delivering training programs on security awareness, data handling/protection, and privacy.

Join Farmers and Merchants Bank as a Full-Time Compliance Officer and experience the excitement of shaping the future of banking in White Hall, AR. In this role, you will have the opportunity to ensure our operations adhere to regulatory standards while cultivating a culture of integrity and safety. Collaborate with a diverse team of problem solvers and make a tangible impact on our organization’s commitment to compliance. Enjoy the flexibility of working from home, allowing you to balance your personal life while contributing to a professional and relaxed work environment. This position empowers you to take ownership of compliance initiatives, enhancing your skills and expertise in the banking industry. Your efforts will be valued as you help maintain our high standards of excellence. As a team member you'll be able to enjoy benefits such as Medical, Dental, Vision, 401(k), Life Insurance, Health Savings Account, Flexible Spending Account, Competitive Salary, and Paid Time Off. Elevate your career with Farmers and Merchants Bank and be a part of something meaningful. A little about FARMERS AND MERCHANTS BANK and The Bank of Fayetteville Welcome to Farmers & Merchants Bank and The Bank of Fayetteville. Our bank culture is driven by a Mission Statement to improve the well-being and promote the success of our employees and customers by treating all with dignity, respect, and compassion. We envision being the best company our employees ever work for and the best bank our customers ever do business with as we step into our 80th year of serving unique communities across the State of Arkansas. Are you excited about this Compliance Officer job? As a new Compliance Officer at Farmers and Merchants Bank, you can expect a structured yet dynamic work environment. Your typical day will involve reviewing and analyzing policies to ensure adherence to regulatory requirements, conducting audits, and implementing compliance training for staff. You will work closely with various departments to address compliance issues and provide guidance on best practices. Your schedule will be Monday through Friday, from 8 AM to 5 PM, allowing for a consistent work routine. You will participate in regular team meetings to discuss ongoing compliance projects and strategies. Additionally, you will prepare reports for management detailing compliance findings and recommendations. As you settle into the role, you will be encouraged to develop a proactive approach to identifying potential compliance challenges and contributing to solutions that enhance our bank’s operational integrity. Does this sound like you? To be successful as a Compliance Officer at Farmers and Merchants Bank, several key skills are essential. Strong analytical abilities are crucial, allowing you to assess complex regulations and interpret their implications for the bank’s operations. Excellent communication skills will enable you to effectively convey compliance policies and foster understanding among staff members across various departments. Attention to detail is paramount, as you will be responsible for conducting thorough audits and identifying any compliance gaps. Additionally, strong problem-solving skills will help you navigate challenges and develop proactive strategies to mitigate compliance risks. A solid understanding of the banking industry and regulatory framework will further bolster your effectiveness in this role. Adaptability and a collaborative mindset are vital, as you will work closely with a team of professionals dedicated to maintaining the highest standards of integrity and safety within the organization. REQUIRED CERTIFICATES, LICENSES, REGISTRATIONS Ability to obtain a nationally recognized professional compliance or lending designation. Must be able to drive an automobile on company business and have a valid driver's license. PREFERRED CERTIFICATES, LICENSES, REGISTRATIONS Professional certification such as CCBCO or CRCM preferred. Ready to join our team? Applying for this position is a walk in the park if you feel it's a good fit for you. Best of luck!

Opala develops healthcare products that tackle the most complex data challenges faced by payers and providers. As a startup originating from a major healthcare plan in the Northwest, we combine deep health-tech expertise with top-tier data and software engineering talent to create products that our customers find meaningful and valuable. These data products empower payers and their partners to find timely insights and take action to intervene in areas like value-based care analytics, interoperability compliance, and real-time streaming of clinical data. In this remote position, we are seeking a Security & Compliance Manager to lead Opala’s compliance and risk management program in a fast-moving healthcare data startup environment. This role owns our audit roadmap (SOC 2, HIPAA, HITRUST), ensures compliance with regulatory frameworks, and drives customer trust by managing security reviews, vendor assessments, and evidence collection. This role is two-fold. As a strategic leader, you will be guiding our compliance roadmap, managing our MSP (IT + SOC/MDR), and interfacing with auditors. As a hands-on contributor, you will be partnering with engineering squads and our Security & Compliance Team to operationalize evidence gathering and process maturity. Responsibilities: - Own and maintain the company’s Information Security Management System (ISMS). - Lead annual and recurring compliance certifications (SOC 2, HIPAA, HITRUST). - Respond to customer security questionnaires and due diligence requests. - Oversee vendor risk management, including contracts, reviews, and security posture assessments. - Manage MSP performance (IT and SOC/MDR) and ensure evidence feeds align with audit requirements. - Mentor and guide other Engineers and Stakeholders in evidence collection, reporting, and process maturity. - Define, implement, and maintain security policies, standards, and procedures. - Serve as the main point of contact for auditors, regulators, and external security partners. - Report compliance and risk posture to leadership and the board. Minimum Qualifications: - Bachelor’s degree in information security, risk management, or related field (or equivalent experience). - 6+ years of experience in security, compliance, or risk management roles, with 3+ years in a leadership capacity. - 3+ years of vendor management experience. - Experience working with SOC 2, HIPAA, and HITRUST frameworks. - Experience working in a Cloud-based SaaS Platform - Familiarity with healthcare data security and PHI handling. - Experience with Drata's GRC and compliance automation platform - Strong organizational skills and ability to manage multiple audit and certification workstreams. - Excellent written and verbal communication skills, with the ability to translate compliance requirements into clear actions for engineering and business teams. - Hands-on experience modernizing segregation of duties in a highly regulated environment - Hands-on experience integrating Drata with external services: Entra ID, Azure, AWS, etc. - Experience working in sprint-based Agile Development Methodology Preferred Qualifications: - Security certifications such as CISA, CISM, or CISSP. - Experience with NIST 800-53, Cloud Security Alliance (CSA), and Center for Internet Security (CIS) - Experience working in healthcare or other regulated industries. - Exposure to enterprise architecture frameworks such as TOGAF. - Experience building compliance roadmaps in early-stage startups - Exposure to Containerization platforms like Docker, Kubernetes, or VMware Tanzu - Exposure to Serverless platforms like Azure Functions, AWS Lambda - Exposure to Big Data platforms like Hadoop, Databricks, Snowflake, Kafka, Cloudera - Exposure to DevSecOps - Exposure to DevOps Squad Organization Model Benefits: - The Seattle base salary range for this full-time position is $163k-$192k. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. - Benefits include medical, dental, vision, life and AD&D insurance, EAP, short-term and long-term disability, 16 days PTO, 8 paid holidays, fully paid holiday closure, parental and family medical leave, 401k, stock options and annual bonuses and salary increases based on merit. Diversity and Inclusivity Statement: - At Opala, we believe that diversity and inclusivity are critical to our success. We encourage and value diverse perspectives and experiences, and we believe that they are essential for driving innovation and creating products that meet the needs of our diverse customer base.  Opala is an equal opportunity employer and makes employment decisions on the basis of merit. We are committed to providing a workplace free from harassment and discrimination. We celebrate the unique differences of our employees because that is what drives curiosity, innovation, and the success of our business. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, gender identity or expression, age, marital status, veteran status, disability status, pregnancy, parental status, genetic information, political affiliation, or any other status protected by the laws or regulations in the locations where we operate. Accommodations are available for applicants with disabilities.