• Own the FedRAMP authorization lifecycle from SSP development through continuous monitoring. • Serve as primary liaison with our agency sponsor and their FedRAMP AODR. • Coordinate with our 3PAO on assessment readiness, evidence collection, and remediation tracking. • Manage SSP, SAR, POA&M, and all FedRAMP deliverables in OSCAL formats. • Track control implementation across all FedRAMP controls and maintain the Control Responsibility Matrix (CRM). • Prepare for annual assessments and significant change requests; monitor PMO guidance and Rev 5 requirements, adapting documentation accordingly. • Manage POA&M items end-to-end through remediation. • Coordinate monthly ConMon deliverables and vulnerability scanning cadence. • Track deviation requests and risk acceptances with agency authorizing officials. • Ensure timely submission of significant change requests and security impact analyses. • Coordinate SOC 2 Type II audits and evidence collection via Drata. • Support ISO 27001, ISO 9001, and IEC 62443 certification efforts. • Manage CMMC Level 2 compliance for DoD contract support. • Map controls across frameworks to reduce duplication and streamline evidence collection. • Maintain the compliance calendar and a continuous audit-ready posture. • Lead adoption of OSCAL (Open Security Controls Assessment Language) for machine-readable compliance. • Implement component-based documentation for reusable control narratives. • Partner with engineering on internal OSCAL tooling and evidence-collection workflows. • Define requirements for continuous-compliance automation. • Maintain security policies aligned with NIST 800-53 Rev 5; keep corporate and FedRAMP boundary documentation consistent. • Develop and exercise Contingency Plan (ISCP), DRP, and BCP with annual testing. • Prepare compliance briefings for leadership and the board; interface with federal agency stakeholders. • Support customer security questionnaires and due diligence requests. • Partner with the SOC team on audit-log retention, incident response documentation, and playbook alignment.

• The Compliance Consultant is key to the delivery of Valpak’s core business, compliance solutions. • This is an exciting role requiring market awareness, the ability to learn quickly and to keep calm under pressure. • The Compliance Consultant is a cross between field based and home based work, where you will act as an ambassador for the company, providing outstanding customer service. • You will also demonstrate exceptional knowledge of Extended Producer and Producer Responsibility Regulations (EPR, Packaging, WEEE and Batteries) and provide technical assistance to other departments within Valpak. • You will be able to talk about other regulations and become familiar with other regulatory changes/consultations as they arise. • The Compliance Consultant will play a vital audit role in the completion of the data monitoring plan and be responsible for managing individual accounts. • Conduct member audits and other types of audits as required • Identify and deliver member and supplier audits in line with the data monitoring plan • Plan own audit schedule with an efficient and professional approach, maximising time and resources • Ensure all data submitted to Valpak by its members meets the required standard of accuracy, advising members appropriately • Provide support to the Audit Manager in the delivery of the data monitoring plan • Complete audits both in person at sites and over Teams • Understanding of Packaging, WEEE and Batteries regulations • Be a Regulatory expert, providing technical guidance to members and support to other departments within Valpak • Understanding of VDI systems and data gathering. Rules checking of VDI EPIC forms • Support members with the transition to EPR • Develop a detailed knowledge of the data submission process • Participate in all data submission rounds • Account Management • Manage a portfolio of member accounts ensuring an appropriate level of service is delivered • Perform a vital role in the retention and also recruitment of compliance scheme members • Actively participate in member training including presenting at events • Customer Service and Team Support • Provide excellent service and work with customer to understand their business needs, and any ways in which we can help them • Develop a rapport with other departments within the business especially VDI, to ensure outstanding member service is delivered at all times • Be seen as an escalation point for Environmental Compliance Advisors, and take responsibility for difficult member situations and technical queries • Work with the wider auditor team, SAMs and Policy to build and integrate knowledge across compliance • Support with testing of systems as and when required • Promote Valpak’s service offering • Be fully aware of and actively promote Valpak’s service offering • Identify and source leads during customer facing situations • General administrative duties • Ensure accurate records of all member and non-member contact are maintained within Valpak’s in-house systems • Key areas • Strong communication and negotiation skills • Polite and professional at all times • Positive, proactive, enthusiastic and approachable • Excellent interpersonal skills • Flexibility and adaptability • Ensure an excellent level of customer service and accuracy in the delivery of Valpak’s monitoring plan

• Lead the development and execution of successfully scaled programs across discreet compliance verticals, communicating program outcomes to leadership across Cities, Policy, Legal, and regional teams. • Serve as the lead for your jurisdictions by creating an operational rhythm and managing cross-functional stakeholders, ensuring initiatives are on track, and maintaining project documentation • Analyze strategic opportunities for risk reduction across jurisdictions, partner with Engineering, Data Science, Operations, Policy and Legal to align roadmaps, and drive successful execution with measurable impact • Lead product assurance leveraging an eye for detail while keeping a global mindset • Support strategic projects to drive efficiency and effectiveness for the Operations team

• Oversee the adjuster licensing process across multiple jurisdictions and lead the complaint handling program to ensure timely, compliant, and customer-focused outcomes. • Own and manage the adjuster licensing lifecycle, including initial licensing, renewals, and continuing education across multiple jurisdictions. • Ensure ongoing compliance with all state licensing requirements and proactively identify potential risks or gaps. • Provide regular, data-driven reporting on licensing status, trends, and risks to leadership. • Serve as the primary point of contact for licensing-related inquiries and communicate regulatory updates clearly to stakeholders. • Support oversight of third-party vendors and licensing partners, ensuring adherence to regulatory requirements and internal standards. • Partner with vendors to improve licensing processes, enhance data accuracy, and drive operational efficiency. • Identify opportunities to streamline and automate licensing workflows, reducing manual effort and improving scalability. • Develop and maintain procedural documentation, controls, and monitoring mechanisms to ensure consistency, accuracy, and audit readiness. • Own the end-to-end complaint handling program, ensuring timely, accurate, and compliant resolution of customer complaints. • Oversee complaint tracking, reporting, and trend analysis; identify root causes and drive remediation efforts. • Develop and maintain compliance documentation, including policies, procedures, and training materials. • Present complaint insights, risks, and recommendations to senior leadership with clarity and precision. • Support regulatory complaint inquiries regarding data calls, market conduct exams, and carrier audit activities. • Partner cross-functionally to implement solutions, including process enhancements and automation opportunities, to address recurring complaint drivers.