• Management of regulatory compliance and quality information. • Support during commercialization to complete regulatory information. • Approve product formulations, raw materials and artwork. • Interact with internal customers regarding food legislation queries. • Interpret, evaluate and apply regulations to new products. • Managing projects and identifying process improvements. • Provide training to other departments.

• Stay current on FDA, FTC, and dietary supplement regulations relevant to ARMRA. Flag regulatory developments and potential impacts. • Review and support approval of marketing materials, influencer content, and digital platforms to ensure claims are substantiated, truthful, and compliant. • Assist with product labeling requirements, including supplement facts panels and allergen declarations, ensuring adherence to FDA compliance (21 CFR 101). • Maintain regulatory documentation, including SOPs, substantiation dossier and claims source-of-truth file. • Assist in the development of internal employee training and external education. • Support the Sr. Manager with regulatory submissions, inquiries, and audits as needed. • Assist in maintaining cGMP-compliant systems (21 CFR 111). • Partner with Marketing, Science, & Growth teams to provide regulatory input and ensure alignment on claims and messaging. • Act as a resource for compliance questions and escalate complex issues to the Sr. Manager of Regulatory Affairs.

• Ejecutar controles y Screening mensual a colaboradores y proveedores. • Aplicar controles de cumplimiento a proveedores de stock y flujo. • Gestionar campañas de Conflicto de Interés y seguimiento a sus medidas de mitigación. • Mantener actualizados los registros críticos: donaciones, auspicios, regalos e invitaciones. • Ejecutar testeos de controles sobre la matriz de riesgos. • Apoyar la implementación de acuerdos y elaboración de reportes FATCA / CRS. • Liderar campañas de remediación de datos de clientes sujetos a reporte. • Implementar y mantener el repositorio documental interno. • Desarrollar proyectos de seguimiento de alertas para reportes normativos. • Elaborar reportes de gestión y mantener KPIs actualizados.

• Own the governance framework for Life360's agentic systems. The major compliance frameworks are still figuring out how to account for autonomous agents. Define the policies, control sets, and compliance posture that govern how agents are built and deployed at Life360 — and build ahead of the regulation. • Take an agentic approach to GRC itself. Automate evidence collection, draft control narratives, triage vendor questionnaires — use AI and internal tooling to do the work humans shouldn't be doing manually. Write the integrations and pipelines that make it real. Know where AI creates leverage, where it introduces risk, and where a human needs to stay in the loop. • Build the policy program as code. Policies in Git, peer-reviewed via pull request. Requirements expressed as enforceable rules and automated checks, not static PDFs. A common controls framework that satisfies SOC 2, ISO 27001, NIST CSF, and future frameworks from a single control reference — no rework. • Drive SOC 2 Type 2, ISO 27001, and SOX ITGC end-to-end as management owner — managing evidence, coordinating with external assessors, and closing gaps before auditors find them. Build the automation once; satisfy three frameworks. • Build an operational risk function, not a register. Quantitative-leaning, FAIR-informed, and connected to live data sources across cloud security posture, endpoint detection, vulnerability management, and asset inventory. Risk scoring that reflects current reality and is actionable at every altitude — service owner to board executive leadership, with Audit Committee reporting on enterprise risk coordinated with Internal Audit. Build the data model, workflow layer, and closed loop that turns risk from a prioritization exercise into a lifecycle with owners and treatment decisions. • Mature the TPRM program. Tiered reviews by risk and data sensitivity. Automated evidence collection and agent-based workflows that reduce friction for vendors and internal teams alike — making it easier to do this right than to skip it. • Be the auditor's primary management contact. Own scoping, walkthroughs, evidence delivery, and management responses for SOC 2, ISO 27001, and SOX ITGC. Auditors leave knowing more about how Life360 actually works than they did when they walked in — and findings get closed before they become repeat findings. • Build the cross-functional relationships that make GRC work in practice. Engineering, Legal, Privacy, Internal Audit and Procurement are all load-bearing parts of this program — own those partnerships and build the workflows that make compliance a shared practice, not a security team deliverable. • Maintain clear role boundaries between management’s first- and second-line GRC operations and Internal Audit’s third-line independent assurance.