• Analyze and track regulatory requirements applicable to the financial and payments market • Participate in and monitor regulatory discussions relevant to the sector • Conduct regulatory assessments related to new products, services, and existing initiatives • Support and follow up on the implementation of regulatory initiatives and action plans • Evaluate new regulations and compliance obligations, identifying their impact on the business • Build relationships with card schemes and ensure business areas are aligned with program compliance requirements • Collaborate cross-functionally with Product, Technology, Finance, Legal, Compliance, Engineering, and Project teams

• Understand current Security processes and how they align to CMMC Controls • Design workflows that will enrich data points for downstream processes and impact analysis • Collaborate with IT development teams to translate process designs into technical implementation within the ServiceNow platform • Build and document end-to-end workflows to solve current gaps in Security and Compliance Processes • Produce clear, comprehensive process documentation to support operational excellence, audit readiness, and automation.

• Support NERC and other applicable regulatory compliance programs for generation assets, including IBR facilities • Track regulatory requirements, deadlines, periodic deliverables, and reporting obligations • Organize, review, and maintain compliance evidence and documentation • Assist with audits, spot checks, RFIs, self-certifications, and other regulatory reviews • Review procedures, technical documents, and internal controls for compliance alignment • Identify potential compliance gaps and support corrective actions and mitigation tracking • Monitor regulatory changes and communicate impacts to internal stakeholders • Support compliance activities related to Generator Owner (GO) and Generator Operator (GOP) responsibilities, as applicable • Assist with implementation and maintenance of compliance obligations associated with generation operations, event response, disturbance reporting, modeling, and emerging IBR-related reliability requirements • Coordinate with operations, engineering, asset management, and regulatory personnel to support ongoing compliance readiness

• Define and lead the privacy and compliance roadmap for entering new global markets, navigating localized data privacy laws, and managing cross-border data transfer requirements. • Take end-to-end ownership of completing enterprise security questionnaires and deeply review/negotiate liability caps, notice periods, and security exhibits in Data Processing Agreements (DPAs) and Business Associate Agreements (BAAs). • Serve as Inato's registered Data Protection Officer (DPO). Own the ongoing governance of GDPR and HIPAA. Manage our Information Security Management System (ISMS) and partner closely with Engineering/IT to maintain our ISO 27001 certification. • Act as the face of Inato’s compliance, leading live security calls with enterprise sponsors and clinical sites to defend our posture. • Act as a consultant to Product Managers, reviewing feature roadmaps and data flows to ensure global patient data management remains compliant from the ideation phase. • Act as the crucial translator who converts complex legal obligations into clear, actionable business requirements and tickets for the engineering team to build. • Create compliance collateral (whitepapers, FAQs) to proactively answer customer questions and implement vendor risk management processes.