• Serve as a Compliance business partner supporting Commercial and Medical Affairs activities (e.g., speaker programs, advisory boards, exhibits, educational grants, etc.), providing strategic and day-to-day advisory support • Provide timely, solutions-oriented guidance to Commercial and Medical stakeholders on complex and nuanced compliance matters • Drive implementation and evolution of the Commercial and Medical Affairs compliance strategy in alignment with senior Compliance leadership • Anticipate and proactively identify internal and external business challenges and regulatory risks, developing and recommending practical, risk-based solutions • Build and maintain strong, trusted relationships with cross-functional stakeholders, promoting a proactive, partnership-driven approach to Compliance • Serve as a recognized subject matter expert, providing guidance across the organization and influencing decision-making • Assess and escalate high-risk, novel, or complex compliance issues to senior Compliance leadership, as appropriate, with clear recommendations • Actively contribute to and influence cross-functional teams and business discussions to ensure Compliance perspectives are integrated into decision-making • Foster stakeholder engagement and visibility across Commercial and Medical Affairs through active partnership (e.g., field engagement, meetings, and business interactions)

• Lead organization-wide risk analysis, maintaining a risk register with documented remediation and mitigation plans. • Serve as the primary advisor on information security risks to security management and business unit leads. • Establish and own the strategy for managing security audits, compliance checks, and external assessments — including GDPR, SOC 2, ISO 27001, CCPA, and other applicable standards. • Liaise with internal and external auditors to implement and sustain required controls. • Build and manage a comprehensive vendor risk program, evaluating the cybersecurity and data protection controls of third parties, vendors, and business partners. • Drive ongoing security program improvement by amplifying areas of strength and developing actionable plans to address gaps. • Lead data governance and data protection programs, ensuring alignment with enterprise risk management principles and up-to-date documentation of systems and processes. • Facilitate IT compliance across identified controls, including IT general controls (ITGCs), application, cloud, and cybersecurity controls. • Document, communicate, and enforce security policies that balance risk with business operations. • Champion cybersecurity best practices across all business units to reduce the organization’s attack surface. • Oversee GRC-related incident response activities, tracking occurrences and resolutions with strict documentation and reporting protocols. • Manage the access review process to ensure appropriate access is consistently granted, maintained, and revoked.

• Help shape permitting strategies and support environmental compliance across energy and hybrid infrastructure projects. • Influence project siting, development, engineering, construction, and operations to meet air quality regulations. • Partner with various teams and regulatory stakeholders to navigate permitting pathways. • Perform environmental due diligence for acquisitions and early-stage development opportunities. • Identify permitting and compliance risks and communicate recommendations. • Prepare and submit various permit applications and coordinate technical studies. • Support interactions with regulatory agencies throughout the permit application process. • Provide air permitting support throughout engineering, procurement, construction, and operations phases. • Maintain organized project schedules, budgets, deliverables, and stakeholder communications. • Translate technical topics into clear recommendations and contribute to internal knowledge-sharing.

• Serve as the primary point of contact for assigned telecommunications clients regarding regulatory reporting. • Coordinate with clients to gather necessary reporting information and ensure timely submissions. • Analyze financial and operational data to prepare and submit compliance filings to the FCC, PUCs, and other regulatory agencies. • Maintain strong knowledge of industry regulatory changes and apply updates to compliance processes.