• Own the creation and ongoing maintenance of compliance checklists for new supplement and Non-THC product launches • Lead label reviews for the Supplements and Non-THC line, ensuring accuracy against applicable regulatory labeling standards • Manage annual state brand registrations for Willie's THC products across all applicable jurisdictions, tracking deadlines and submission requirements • Organize and maintain co-manufacturer documentation, facility records, and label information required for regulatory submissions • Maintain Kosher and GFCO (gluten-free) certifications at co-packer facilities, including monthly check-ins and ingredient submissions as needed • Submit new brand registrations for JuneShine products across relevant state and federal channels • Complete and submit TTB and CDTFA end of month process and excise reports • Build and maintain a centralized compliance database - SOPs, labels, manufacturing info - to serve as the internal resource for audits, approvals, and new submissions • Support the Compliance Manager on ad hoc projects, including renewal reporting, sales number compilation, and cross-functional coordination with supply chain and regulatory teams

Job Description Are You Ready to Make It Happen at Mondelēz International? Join our Mission to Lead the Future of Snacking. Make It Uniquely Yours. Reporting to the Global IT Compliance Lead, as an IT Compliance Manager, the successful candidate will be proficient at managing risk-based IT compliance initiatives across Mondelez. The role is key in the successful delivery of the annual Sarbanes-Oxley information technology compliance program and the operationalization of EU NIS2 Directive requirements for all in-scope applications and supported technologies. In addition, the candidate will be performing compliance activities related to technology assurance areas around access management, vulnerability management, and configuration management, among others. Candidate will also demonstrate ability and experience in governance related activities including administrative management of risk and control registers as well as policies and standards. How you will contribute Assurance Program Responsibilities - Conduct assurance activities related to the annual SOX Compliance audit with a specific focus of IT General Controls and Vendor SOX Compliance. - Lead compliance activities for the NIS2 Directive, including performing initial and recurring gap assessments, remediation tracking, and supply chain security alignment. - Perform quarterly compliance assurance testing and maintain audit-ready evidence documentation. - Document compliance testing evidence and results providing audit ready assurances. - Maintain Management Action Plan (MAP) catalog with due dates. - Manage monthly audit Management Action Plans (MAPs). Includes the timely communication of open MAPs an escalation as needed of risks to completing MAPs at their agreed delivery dates. - Perform administrative activities in GRC Solution for compliance related activities. - Manage ad-hoc external IT audits. - Support GRC Lead for CTO/CISO focused internal audits. - Manage compliance program reporting activities. Requirements: - 7 years in one or more of the following fields: Information Security, SOX Compliance, Internal Controls, Internal Audit or GRC, - 3 years leading/managing internal and external audits (i.e., Sarbanes-Oxley SOX) for a public US company. - Direct experience with EU cybersecurity regulations, specifically the NIS2 Directive. - Experience with GRC tools (e.g., Archer). - ISACA CISA and/or CISM Certifications (significant plus) - Knowledge of security concepts and methodologies such as risk assessments, risk & controls, policies & standards, enterprise security strategies, network, and cloud security. - Working knowledge of security and compliance frameworks such as CIS, NIST and ISO - Excellent written and verbal communications skills, including presentational skills and able to clearly communicate issues to management and other key stakeholders. More about this role Travel requirements: 25% No Relocation support available Business Unit Summary At Mondelēz International, our purpose is to empower people to snack right by offering the right snack, for the right moment, made the right way. That means delivering a broad range of delicious, high-quality snacks that nourish life's moments, made with sustainable ingredients and packaging that consumers can feel good about. We have a rich portfolio of strong brands globally and locally including many household names such as Oreo, belVita and LU biscuits; Cadbury Dairy Milk, Milka and Toblerone chocolate; Sour Patch Kids candy and Trident gum. We are proud to hold the top position globally in biscuits, chocolate and candy and the second top position in gum. Our 80,000 makers and bakers are located in more than 80 countries and we sell our products in over 150 countries around the world. Our people are energized for growth and critical to us living our purpose and values. We are a diverse community that can make things happen-and happen fast. Mondelēz International is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation or preference, gender identity, national origin, disability status, protected veteran status, or any other characteristic protected by law. Job Type Regular Information Security Technology & Digital

The Head of Central Compliance Programs, Testing and Assurance is responsible for leading the independent assurance function and the compliance operations functions. This role provides senior management and the Board with objective assurance on the design and operating effectiveness of governance, risk management, and internal control frameworks across the bank. In addition, the role is responsible for ensuring that the centralized frameworks including the Enterprise Compliance Risk Assessment, Regulatory Change Management and Metrics and Reporting are effectively operating. The role acts as a critical second‑line function, partnering with business and first‑line teams while maintaining independence, credibility, and strong regulatory engagement. Job Duties: - Define and execute the strategy for our centralized programs including assurance, Enterprise Compliance Risk Assessment, Regulatory Change Management and Metrics and Reporting. Ensure alignment with the Bank’s Risk Appetite and our regulatory priorities. - Lead, mentor, and develop a team of compliance professionals across banking products and operations within Consumer, Commercial and Private/Bank Wealth. - Establish clear assurance methodologies, standards, and reporting practices. - Evaluate the design and effectiveness of first‑line controls and risk mitigation activities; reporting on issues, root causes and emerging risks. - Continue to assess and enhance our centralized compliance programs to ensure efficiencies and productivity. - Serve as a key point of contact for regulators, internal audit, and external auditors on assurance and compliance operations related matters Required Skills/Experience: - Bachelor’s degree required; advanced degree preferred. - 12+ years of experience in banking, risk management, compliance, assurance, or internal audit. - Organizational experience managing large and complex projects and ability to interact with senior management and within a matrixed environment. - Deep understanding of banking products and operations; regulatory requirements; and key processes, controls, and exposure areas. - Proven leadership and management skills in a professional environment. Education/Certifications: - Bachelor’s degree or relevant work experience required - Advanced degree preferred (e.g., Masters/MBA/JD) - CRCM, Audit or Assurance Certifications Preferred Hours and Work Schedule: Hybrid: - 4 days in the office, 1 working from home - Hours per Week: 40 - Work Schedule: Monday-Friday Pay Transparency The salary range for this position is $228,000-$277,000 per year, plus an opportunity to earn an annual discretionary bonus. Actual pay is based on various factors including but not limited to the budget, work location, and relevant skills and experience. We offer competitive pay, comprehensive medical, dental and vision coverage, retirement benefits, maternity/paternity leave, flexible work arrangements, education reimbursement, wellness programs and more. Note, Citizens’ paid time off policy exceeds the mandatory, paid sick or paid time-away policy of every local and state jurisdiction in the United States. For an overview of our benefits, visit https://jobs.citizensbank.com/benefits . About Us Equal Employment Opportunity Citizens, its parent, subsidiaries, and related companies (Citizens) provide equal employment and advancement opportunities to all colleagues and applicants for employment without regard to age, ancestry, color, citizenship, physical or mental disability, perceived disability or history or record of a disability, ethnicity, gender, gender identity or expression, genetic information, genetic characteristic, marital or domestic partner status, victim of domestic violence, family status/parenthood, medical condition, military or veteran status, national origin, pregnancy/childbirth/lactation, colleague’s or a dependent’s reproductive health decision making, race, religion, sex, sexual orientation, or any other category protected by federal, state and/or local laws. At Citizens, we are committed to fostering an inclusive culture that enables all colleagues to bring their best selves to work every day and everyone is expected to be treated with respect and professionalism. Employment decisions are based solely on merit, qualifications, performance and capability. Equal Employment and Opportunity Employer Job Applicant Data Privacy Policy Background Check Any offer of employment is conditioned upon the candidate successfully passing a background check, which may include initial credit, motor vehicle record, public record, prior employment verification, and criminal background checks. Results of the background check are individually reviewed based upon legal requirements imposed by our regulators and with consideration of the nature and gravity of the background history and the job offered. Any offer of employment will include further information.

• Manually prepare, populate, and file SAR and/or STR forms based on investigation outputs and established templates • Ensure all regulatory reports are completed accurately, consistently, and within required deadlines • Perform data entry and validation across multiple compliance systems and regulatory portals • Follow documented procedures and escalation paths; flag data gaps or inconsistencies for review • Collaborate with investigators and senior team members to clarify information needed for filings