Role Description We are seeking highly motivated and detail-oriented CMMC Level 2 Compliance Analysts to join our team. In this role, you will play a crucial part in guiding our partner PMEs through the complex CMMC Level 2 certification process. You will leverage your expertise in cybersecurity and compliance frameworks to review documentation, identify gaps, and provide essential guidance to ensure adherence to NIST SP 800-171 controls and CMMC requirements. This is a critical project with a significant impact on national security. Key Responsibilities: - Assist PMEs in the development and completion of their System Security Plans (SSPs). - Review PME-submitted evidence and documentation, including asset classification and boundary diagrams, to identify compliance gaps against CMMC Level 2 and NIST SP 800-171 controls. - Provide clear, actionable feedback and guidance to PMEs on interpreting complex cybersecurity controls and improving the quality and accuracy of their compliance documentation. - Collaborate with Cyber and GRC teams to streamline the SSP review process and address data accuracy issues. - Support PMEs in understanding and implementing the inheritance model for applicable controls. - Contribute to the establishment and maintenance of a monitoring and reporting framework for PME progress. - Potentially assist in developing targeted training or guidance materials to enhance PME cybersecurity expertise. - Maintain meticulous records of reviews, feedback, and PME progress. Qualifications - Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent practical experience. - Proven experience in cybersecurity, GRC, or IT compliance roles. - Strong understanding of cybersecurity frameworks, particularly NIST SP 800-171 and the Cybersecurity Maturity Model Certification (CMMC) program, especially Level 2 requirements. - Experience with System Security Plans (SSPs) and their role in demonstrating compliance. - Ability to interpret and apply complex security controls and regulatory requirements. - Excellent analytical, problem-solving, and communication skills, with the ability to explain technical concepts to individuals with varying levels of cybersecurity expertise. - Detail-oriented with strong organizational skills and the ability to manage multiple tasks in a fast-paced environment. - U.S. Citizenship is required. Preferred Qualifications - Relevant certifications such as CMMC Certified Professional (CCP), Certified Information Systems Security Professional (CISSP), Certified in Risk and Information Systems Control (CRISC), or Certified Information Systems Auditor (CISA). - Experience working with government contractors or within the Defense Industrial Base (DIB). - Familiarity with GRC software platforms. - Prior experience in a client-facing or resource augmentation role.

Role Description This position is needed to lead the strategic execution and governance of telecommunications compliance for a portion of Twilio’s business. As a compliance subject matter expert, you will safeguard Twilio’s reputation by navigating the complex intersection of global regulation and product innovation. You will act as a regional owner, managing operational rhythms and partnering cross-functionally to mitigate risks while identifying growth opportunities. This is a high-visibility individual contributor role that ensures our global communications platform remains trusted, compliant, and performing at its peak. Responsibilities - Establish and execute country-level programs that align with Twilio’s short-term and long-term telecom compliance strategy. - Manage weekly compliance operating rhythm for your assigned countries, triaging developments and escalating critical issues to senior management. - Identify potential compliance risks and work cross-functionally to implement mitigation strategies. - Own the corporate governance of regional initiatives by maintaining internal policies and procedures that ensure adherence to international telecommunications standards. - Partner with Product and Engineering teams to drive innovation in compliance initiatives while identifying potential monetization opportunities. - Collaborate with internal functions to develop training materials and educate employees on evolving regulatory requirements. - Update senior leadership regularly on strategy execution and performance. Qualifications - 4+ years of experience in strategy and operations, program management, telecom policy, regulatory compliance, or equivalent. - Proven ability to program manage complex cross-functional projects and lead operational meetings with diverse stakeholders. - Strong analytical skills with the ability to use data to drive strategy and report to executive leadership. - Exceptional written and verbal communication skills, with experience presenting to senior leaders. - Well-honed critical thinking skills and the ability to problem-solve individually or in a group setting while understanding key financial drivers of the business. Requirements - Demonstrated experience in the telecommunications industry, including knowledge of global regulations such as STIR/SHAKEN, KYC, or regional equivalents. - Proficiency with SQL, Looker and Airtable. - Experience working within a global, high-growth technology environment. - Familiarity with product development lifecycles and how to integrate compliance into technical roadmaps. Benefits - Competitive pay. - Generous time off. - Ample parental and wellness leave. - Healthcare. - A retirement savings program. - Participation in Twilio’s equity plan and corporate bonus plan. - Health care insurance. - 401(k) retirement account. - Paid sick time. - Paid personal time off. - Paid parental leave. Application Deadline Information Applications for this role are intended to be accepted until June 30, 2026, but may change based on business needs.

• Support the coordination, preparation, and delivery of regulatory submissions and lifecycle management (LCM) activities. • Assist in organizing submission team meetings (e.g., Kick-off Meetings) and follow up on agreed actions. • Coordinate, request, and track documentation from Subject Matter Experts (SMEs) to support submission readiness and timelines. • Support the preparation and maintenance of the Submission Content Plan (SCP) under the guidance of the RSC Lead. • Ensure timely dispatch of non-eCTD submission packages to LRRs and RPRs and track dispatched documentation per country. • Provide hands-on operational support for labeling activities. • Prepare annotated labeling documents for regulatory review. • Initiate and coordinate mock-up requests in the Artwork Management System. • Support change control activities related to local labeling updates. • Support the creation, maintenance, and accuracy of submission and regulatory records in regulatory systems.

• Coordinate the preparation, compilation, and submission of new drug applications and lifecycle management (LCM) activities • Coordinate closely with Regional Submission Coordinators to ensure completeness of core documentation required to support global and regional submission planning and requirements • Organize submission team meetings and facilitate effective communication among all stakeholders • Open required records in submission planning tools and Regulatory Information Management Systems • Prepare Submission Content Plans (SCP) based on country-specific regulatory requirements • Coordinate, request, and track documentation from relevant SMEs to ensure timely and complete submission readiness • Provide regular updates to the submission team on status and timelines • Draft M1 documents as required and coordinate their review • Support labeling preparation, notably in Artwork management system and change control system