• Leads operational oversight and continuous advancement of the USACS Compliance & Ethics and Privacy Program, including the seven core elements of an effective compliance program. • Promotes consistent application of USACS’s Code of Conduct, compliance policies, and privacy standards while fostering a culture of integrity, accountability, and ethical decision-making across the organization. • Establishes trusted relationships across the organization and serves as a strategic advisor to leadership on compliance, privacy, governance, and emerging operational risks. • Identifies existing and emerging compliance, privacy, operational, and technology-enabled risks and partners cross-functionally to develop mitigation strategies, corrective actions, and governance solutions. • Supports ongoing advancement of the compliance program through process optimization, technology enablement, data-informed insights, and continuous improvement initiatives. • Develops meaningful compliance reporting, dashboards, and trend analysis to support risk-based prioritization, operational decision-making, and evolving regulatory and organizational priorities. • Acts as a consultative resource to USACS leaders on compliance and privacy matters and provides recommendations to enhance policies, procedures, and internal controls as needed. • Leads, develops, and mentors department personnel while fostering accountability, collaboration, operational excellence, and continuous professional growth. • Partners with Information Security, Information Technology, Legal, and operational stakeholders to support appropriate safeguards, technology governance alignment, and responsible use of digital tools and systems.

• Prepare, review, monitor or maintain contracts and ensure compliance • Audits municipal contracts to verify compliance • Works with District Managers to resolve noncompliance issues • Partners with Legal staff to manage contracts and agreements • Manages complex contracts and recommends extensions or bidding • Investigates contract inquiries and prepares documents for resolutions • Participates in strategic planning for municipal business • Evaluates existing municipal contracts for new business opportunities

• Support the day-to-day operation of the compliance programme • Maintain compliance calendars, risk registers, and internal policy libraries • Monitor regulatory developments across relevant UK, EU, and international frameworks • Prepare compliance briefings and management updates • Coordinate compliance training and awareness activities • Support audit preparation and certification activities, including ISO 27001 and SOC 2 • Support GDPR compliance activities across the business • Maintain privacy records, registers, and supporting documentation • Coordinate Data Protection Impact Assessments (DPIAs) • Manage Data Subject Rights Requests and associated processes • Support processor due diligence and vendor privacy reviews • Maintain privacy notices, policies, and supporting documentation • Assist with international data transfer assessments and documentation • Support the management of standard commercial agreements, including NDAs, DPAs, supplier agreements, and advisory contracts • Maintain contract registers and renewal tracking • Manage template libraries and version control • Assist with legal due diligence activities relating to partnerships, procurement, and fundraising initiatives • Coordinate document execution and filing processes • Draft, maintain, and update internal policies and governance documentation • Coordinate policy reviews and staff acknowledgements • Support management reporting on compliance and risk matters • Act as a first point of contact for internal compliance-related queries • Escalate legal matters appropriately to the General Counsel

• Own the preparation, quality control, and timely submission of all outbound sanctions regulatory reports, including OFAC reports • Maintain a filing calendar and proactively escalate risks of late or incomplete submissions to sanctions leadership • Identify and drive automation opportunities across the sanctions reporting workflow • Work with AI and engineering teams to scope and test connectors between sanctions tooling and downstream reporting systems • Partner with Regional Compliance Officers across non-US jurisdictions to solicit and incorporate local regulatory feedback • Serve as a trained backup for sanctions investigations and account closure decisions • Document current-state processes and propose improvements that reduce manual effort without compromising regulatory accuracy or accountability