• Lead and manage global import/export compliance processes for U.S. and Canadian shipments • Ensure adherence to trade laws and regulations • Collaborate cross-functionally with supply chain, procurement, product development, and logistics teams • Maintain and improve recordkeeping systems • Facilitate Free Trade Agreement (FTA) documentation • Monitor regulatory changes impacting trade obligations

• Develop and maintain the operational and compliance infrastructure for scaling Fortress Affinity Management • Establish compliance documentation standards • Govern workflows and maintain an audit-ready posture • Partner with underwriting, service, finance, and leadership to translate program requirements • Support internal, carrier, and regulatory audits • Manage surplus lines compliance activities • Track and manage state-specific filing deadlines • Provide guidance, training, and best practices for compliance execution

• Serve as a Compliance business partner supporting Commercial and Medical Affairs activities (e.g., speaker programs, advisory boards, exhibits, educational grants, etc.), providing strategic and day-to-day advisory support • Provide timely, solutions-oriented guidance to Commercial and Medical stakeholders on complex and nuanced compliance matters • Drive implementation and evolution of the Commercial and Medical Affairs compliance strategy in alignment with senior Compliance leadership • Anticipate and proactively identify internal and external business challenges and regulatory risks, developing and recommending practical, risk-based solutions • Build and maintain strong, trusted relationships with cross-functional stakeholders, promoting a proactive, partnership-driven approach to Compliance • Serve as a recognized subject matter expert, providing guidance across the organization and influencing decision-making • Assess and escalate high-risk, novel, or complex compliance issues to senior Compliance leadership, as appropriate, with clear recommendations • Actively contribute to and influence cross-functional teams and business discussions to ensure Compliance perspectives are integrated into decision-making • Foster stakeholder engagement and visibility across Commercial and Medical Affairs through active partnership (e.g., field engagement, meetings, and business interactions)

• Lead organization-wide risk analysis, maintaining a risk register with documented remediation and mitigation plans. • Serve as the primary advisor on information security risks to security management and business unit leads. • Establish and own the strategy for managing security audits, compliance checks, and external assessments — including GDPR, SOC 2, ISO 27001, CCPA, and other applicable standards. • Liaise with internal and external auditors to implement and sustain required controls. • Build and manage a comprehensive vendor risk program, evaluating the cybersecurity and data protection controls of third parties, vendors, and business partners. • Drive ongoing security program improvement by amplifying areas of strength and developing actionable plans to address gaps. • Lead data governance and data protection programs, ensuring alignment with enterprise risk management principles and up-to-date documentation of systems and processes. • Facilitate IT compliance across identified controls, including IT general controls (ITGCs), application, cloud, and cybersecurity controls. • Document, communicate, and enforce security policies that balance risk with business operations. • Champion cybersecurity best practices across all business units to reduce the organization’s attack surface. • Oversee GRC-related incident response activities, tracking occurrences and resolutions with strict documentation and reporting protocols. • Manage the access review process to ensure appropriate access is consistently granted, maintained, and revoked.