• Partner with compliance lead to build, refine, and continuously mature a best-in-class compliance program aligned with OIG guidance, industry standards and best practices, and Mineralys’ strategic priorities • Draft, implement, and periodically refresh compliance policies, standard operating procedures, and related guidance documents • Manage the end-to-end policy lifecycle, including stakeholder review and communication of policy updates to affected personnel • Design, develop, and administer a comprehensive compliance training program that supports ongoing education and reinforces a strong compliance culture. • Partner with business to manage Mineralys’ healthcare professional (HCP) engagement program • Evaluate proposed HCP engagements for legitimate business need, appropriate fair market value (FMV) compensation, and consistency with legal and regulatory requirements • Implement a risk-based compliance monitoring program that evaluates adherence to policies and procedures across high-risk business activities • Support the management and resolution of compliance investigations ensuring timely, consistent, and well-documented outcomes. • Take on strategic compliance projects and initiatives, including support for privacy matters • Perform benchmarking and research on emerging compliance topics, regulatory developments, and industry best practices to inform program strategy.

Role Description As Block's compliance program grows in scale and complexity, we need dedicated, expert-level oversight of how compliance issues are identified, triaged, and governed. This role ensures emerging risks receive consistent, rigorous attention from the moment they surface — and builds the intake and lookback processes that keep our program audit-ready and regulator-defensible across AML/BSA, Sanctions, and Consumer Protection. You will manage key elements of the issues management lifecycle, with a focus on pre-issue identification and lookback oversight. This role sits within the Compliance Issues Management Oversight (CIMO) program on the Regulatory Compliance Strategy (RCS) team and reports to the RCS Lead. You'll be the centralized point of contact for teams surfacing potential compliance issues — advising them from discovery through formal submission, coordinating cross-functional remediation, and ensuring robust lookback governance. If you're looking for high-visibility, high-autonomy work at the intersection of compliance strategy, issues management, and technical execution, this role was built for you. Responsibilities - Serve as the centralized point of contact for teams identifying potential compliance issues — providing end-to-end advisory from discovery through formal submission and resolution. - Lead intake triage with consistent risk criteria and facilitate root cause analysis with subject-matter experts. - Convene and lead cross-functional working groups to assess potential issues, classify scope, determine governance track assignments, and coordinate remediation approach. - Govern lookback activities across AML/BSA, Sanctions, and Consumer Protection remediations. - Develop and maintain intake procedures, decision trees, and classification criteria. - Perform quality reviews on issue documentation, action plans, evidence packages, and closure submissions. - Identify and implement opportunities to automate issues management workflows using AI and automation tools. - Partner with the CIMO and enterprise issues management team on system-of-record integrity, reporting alignment, and tooling. - Track and report on program metrics to inform leadership and regulatory reporting. Qualifications - 8+ years of experience in compliance issues management, remediation oversight, or governance within a regulated financial services environment. - Deep knowledge of anti-money laundering (BSA/AML), Sanctions/OFAC, and Consumer Protection regulations. - Demonstrated experience managing end-to-end issue lifecycles. - Experience with regulatory examinations and enhanced regulatory oversight. - Strong data and technical fluency. - Excellent cross-functional and organizational, presentation, verbal, and written communication skills. - Experience facilitating divergent conversations with senior management. - Experience leveraging AI, automation, and workflow tooling to drive efficiency in compliance processes. Benefits - Remote work options. - Medical insurance. - Flexible time off. - Retirement savings plans. - Modern family planning options. Company Description Block, Inc. (NYSE: XYZ) builds technology to increase access to the global economy. Each of our brands unlocks different aspects of the economy for more people: - Square: makes commerce and financial services accessible to sellers. - Cash App: is the easy way to spend, send, and store money. - Afterpay: is transforming the way customers manage their spending over time. - TIDAL: is a music platform that empowers artists to thrive as entrepreneurs. - Bitkey: is a simple self-custody wallet built for bitcoin. - Proto: is a suite of bitcoin mining products and services.

Role Description Leads and directs team responsible for multi-state delegation oversight activities including monitoring of delegation oversight to ensure compliance with state, federal, National Committee for Quality Assurance (NCQA), and Molina requirements. Collaborates closely with internal business owners to manage and administer the relationships and performance of delegated entities including health plan onboarding and offboarding activities, management of oversight activities, audits and corrective action plans, issuance and service issue escalations, and ongoing risk monitoring. - In collaboration with senior leadership, sets the strategic direction for Molina’s delegation oversight responsibilities and partnerships. - Responsible for coordinating delegated vendor activities between contracted entities and Molina Healthcare; this includes claims, contact center, credentialing, appeals and grievances, care management, utilization management, pharmacy, and other operational functions across multiple states and lines of business. - Collaborates closely with internal business owners to manage and administer the relationships and performance of delegated entities. - Participates in the negotiation process of delegated service level agreements (SLAs) and addendums; ensures contractual obligations are achieved, and initiates contract changes when required. - Provides assistance to strategic sourcing, national network, and health plan teams to optimize the cost-effectiveness of negotiations and ensure compliance with regulatory requirements. - Demonstrates expert review and communications of requirements related to delegated functions - ensuring clarity and minimizing change requests. - Develops, implements, and manages reporting of metrics and service level agreements (SLAs) that effectively measure team and vendor performance in line with business needs and regulatory compliance. - Demonstrates deep understanding of business and regulatory requirements, deliverables, processes, and technologies impacting delegated agreements. - Manages delegated vendor contracts as they relate to specific functions, oversees regulatory requirements, and manages related governance committees, reporting to other applicable committees (e.g., quality). - Manages delegated vendor relationships as key point of contact between specified vendors and the business. - Serves as a point of escalation for delegated vendor issues and risks - driving issues to resolution. - Optimizes delegated vendor relationships through contract management compliance, quantitative analyses, and relationship management - creating mutually beneficial opportunities. - Maintains tools related to delegation oversight relationships, including delegated vendor tracking, analytics, and performance management. - Manages the collection, consolidation, and communication of reporting and data on delegated vendor contracts, performance, risk, and relationships with key stakeholders and vendors. - Manages the performance of national and state delegated vendors to ensure compliance with contractual and regulatory requirements. - Manages the national delegation oversight performance management team. - Manages required audits for national and state delegated vendors to ensure compliance with contractual and regulatory requirements. - Manages national and state delegation oversight audit teams. - Collaborates with Molina quality department on NCQA external audits to ensure compliance with accreditation standards for applicable national and state delegated vendors. - Hires, trains, mentors, develops, and manages delegation oversight team, and demonstrates accountability for team performance. Qualifications - At least 8 years of related delegation oversight/auditing/vendor/data management experience, or equivalent combination of relevant education and experience. - At least 3 years management/leadership experience. - Ability to build relationships and manage a team. - Strong critical-thinking and problem-solving/analytical abilities. - Strong time-management, organizational, detail orientation and prioritization skills. - Strong project management skills and knowledge of project management tools/processes. - Strong data processing/analysis experience. - Ability to interpret error reports and identify remediation steps. - Ability to collaborate cross-functionally across a highly matrixed organization. - Excellent interpersonal and verbal/written communication skills. - Microsoft Office suite proficiency (including Excel), and ability to learn/navigate new software programs. Preferred Qualifications - Experience in Medicare and Medicaid environments. - Experience with Internal team audits and Medicare Program audits. - Experience with Power BI and Salesforce. Benefits Molina Healthcare offers a competitive benefits and compensation package. Company Description Molina Healthcare is an Equal Opportunity Employer (EOE) M/F/D/V.

Role Description We are seeking a Senior GRC Specialist to own governance, risk, and compliance activities across federal IT and cybersecurity programs. This role sits at the intersection of policy, operations, and accountability, requiring someone who can manage the rigor of FISMA compliance and RMF-driven authorization programs while also keeping a sharp eye on service delivery metrics, SLA performance, and audit readiness. This is a senior individual contributor role for a practitioner who is equally comfortable drafting POA&M responses, engaging with auditors, and producing operational reporting that gives leadership clear visibility into risk and program health. What You'll Do - Own and manage POA&M lifecycle activities: tracking findings, coordinating remediation, validating closure, and maintaining accurate, audit-ready documentation. - Support FISMA compliance programs, including evidence collection, continuous monitoring, and coordination with system owners and ISSOs/ISSMs. - Apply NIST SP 800-53 and NIST SP 800-37 (RMF) to assess control implementation, support authorization activities, and maintain system security postures. - Manage and report on SLAs and availability metrics for IT and cybersecurity operations; surface trends, flag risks, and drive accountability against commitments. - Develop and maintain operational reporting for internal leadership and government stakeholders — translating compliance and operational data into clear, actionable insight. - Lead audit readiness activities: preparing teams and documentation for internal reviews, independent assessments (3PAO/IA), and government audits. - Identify gaps in control implementation or operational processes and recommend practical, risk-informed mitigation strategies. - Support continuous monitoring programs and contribute to ongoing ATO/cATO sustainment. Qualifications - Bachelor's degree in Information Technology, Cybersecurity, Information Systems, or a related field, with 6+ years of relevant experience; equivalent combination of education and demonstrated experience considered. - Active Top Secret (TS) clearance required; candidates without an active TS clearance will not be considered; sponsorship is not available for this role. - U.S. citizenship required, must be located in the US. - Demonstrated experience supporting FISMA compliance programs in federal environments. - Working knowledge of NIST SP 800-53 (control families, implementation, and assessment). - Working knowledge of NIST SP 800-37 (Risk Management Framework) and the ATO/authorization process. - Hands-on experience managing POA&M lifecycle: tracking, remediation coordination, evidence validation, and closure. - Experience preparing for and supporting federal audits and security assessments, including evidence packaging, stakeholder coordination, and finding response. - Experience managing SLAs and availability metrics in IT service delivery or cybersecurity operations environments. - Ability to develop and maintain operational reporting that communicates performance and risk posture to technical and executive audiences. - Experience producing clear, accurate reporting on cybersecurity operations, compliance status, and service health for government and internal stakeholders. Desired Qualifications - Experience with eMASS or similar GRC/authorization tracking platforms. - Familiarity with continuous monitoring (ConMon) program management and reporting. - Experience working alongside ISSOs, ISSMs, and Authorizing Officials in the RMF process. - Knowledge of FedRAMP, DoD CC SRG, or agency-specific overlays (e.g., HHS, DoD, DHS). - Experience with ITSM platforms (ServiceNow, Jira) for tracking findings and operational workflows. - Relevant certifications: CISSP, CISM, CAP/CGRC, Security+, or equivalent. Benefits - Premium health care plans (90% employer-paid). - Employee stock plan. - 100% 401k match (up to IRS annual max). - Generous PTO package. - Personal training and development budget.