• Supporting the development, implementation, and continuous improvement of the IT compliance framework. • IT controls testing, process reviews, risk assessments, and leading various compliance initiatives. • Performing IT general controls (ITGC) and application controls testing in accordance with SOX and other regulatory requirements. • Identifying control gaps through assessments and process reviews, recommending remediation actions, and tracking resolution progress. • Reviewing Service Organization Controls (SOC) reports and supporting third-party vendor risk management activities. • Creating and maintaining IT policies and procedures with regular updates to reflect changes in the IT environment. • Facilitating quarterly user access reviews, including quality reviews of deliverables. • Conducting quarterly log reviews, including SAP firefighter logs and administrator activity logs. • Assisting in the development and delivery of IT compliance training and awareness initiatives. • Supporting audit preparations and facilitating engagements with internal and external auditors. • Creating process flow diagrams to document workflows and controls. • Managing special IT compliance projects and additional responsibilities as assigned.

Role Description The EOHS Generalist provides centralized EOHS support to Domestic Operations by partnering with business unit leaders, operational stakeholders, and the enterprise EOHS team. This role acts as a conduit between the field and the enterprise, ensuring operational needs inform enterprise program development while helping business units effectively implement EOHS standards, policies, and tools. This position focuses on remote program support, data analysis, training development, and consultative guidance. The EOHS Generalist plays a key role in strengthening EOHS capability across Domestic Operations and ensuring the consistent execution of the EOHS management system. You will enjoy the flexibility to telecommute* from anywhere within the U.S. as you take on some tough challenges. Primary Responsibilities - Enterprise EOHS Integration & Program Development: - Serve as a conduit between business units and enterprise EOHS, elevating operational insights, emerging risks, and feedback to drive program and policy development. - Collaborate with enterprise EOHS leaders to design, refine, and implement EOHS programs, standards, and processes that support effective risk management across Domestic Operations. - Support to implement business‑unit‑ready tools, templates, communications, and implementation guidance. - Ensure business programs are aligned with regulatory requirements, enterprise standards and strategy, and operational realities. - Operational Support (Remote / Centralized): - Provide remote consultative support to business unit leaders regarding regulatory requirements, EOHS expectations, and program execution. - Conduct virtual assessments through document reviews, data analysis, dashboard insights, and process evaluations. - Support operational risk management by implementing tools, guidance materials, and resources that enable business units to execute EOHS responsibilities. - Assist with EOHS documentation reviews, including safety plans, procedures, and corrective action plans—to ensure consistency and compliance. - Risk Management & Compliance: - Support the identification and evaluation of occupational, environmental, and operational risks through centralized data analysis and program review. - Assist business units in developing or updating safety procedures, controls, and documentation to maintain compliance. - Conduct periodic remote compliance reviews and coordinate follow‑up with business units. - Incident Management & Data Analytics: - Support incident investigations by facilitating remote root‑cause analysis, reviewing incident reports, and providing recommendations for corrective and preventive actions. - Track, analyze, and trend safety and environmental data to identify systemic risks, recurring issues, and improvement opportunities. - Develop and maintain dashboards and reporting tools that provide meaningful insight into operational risk and performance. - Training Development & Safety Culture: - Partner with enterprise and business‑unit training teams to design, develop, and refine EOHS training modules, micro‑learning content, onboarding materials, and job aids. - EOHS subject‑matter expertise to ensure EOHS and/or business training is aligned with operational needs and regulatory requirements. - Deliver virtual training and coaching to support capability building across Domestic Operations. - Support safety culture initiatives through communication development, engagement campaigns, and enterprise‑level awareness activities. - Continuous Improvement: - Support enterprise EOHS initiatives, strategic priorities, and continuous improvement efforts. - Identify gaps and opportunities to improve EOHS processes, systems, and tools. - Strengthen organizational visibility into risk and drive consistent execution of EOHS standards across Domestic Operations. Qualifications - Bachelor’s degree in Environmental Health & Safety, Occupational Safety, Environmental Science, or a related field (or equivalent experience). - 3+ years of EOHS or safety experience supporting operational environments. - Working knowledge of OSHA, EPA, DOT, NIOSH and applicable safety regulations. - Access to reliable transportation and valid US driver’s license. Requirements - Professional certification such as COHN, ASP, CSP, CIH, or CHMM. - Experience supporting distributed or multi‑site operations. - Experience developing EOHS programs, training, or management systems. - Strong analytical, problem‑solving, and incident investigation skills. - Ability to influence leaders and employees at all levels. - Strong communication, facilitation, and organizational skills. Benefits - Comprehensive benefits package. - Incentive and recognition programs. - Equity stock purchase. - 401k contribution (all benefits are subject to eligibility requirements). Travel - 10-15% as support needed.

• Manage the ongoing operation and improvement of XTEL’s ISMS. • Draft, review, and maintain security & compliance policies, standards, and procedures. • Manage internal and external audits (ISO 27001, SOC 2). • Monitor compliance obligations across frameworks including ISO 27001, SOC 2, SOC 1/ISAE 3402, GDPR, and NIS2. • Own risk assessments and treatment plans. • Manage our Third Party Risk Management (TPRM) efforts. • Assist with client security questionnaires, RFPs, and due diligence requests. • Support ESG initiatives. • Collaborate with stakeholders across IT, Product, Engineering, HR, etc. to implement security controls. • Contribute to incident response and BCP/DRP planning and testing.

Role Description Mindrift connects specialists with project-based AI opportunities for leading tech companies, focused on testing, evaluating, and improving AI systems. Participation is project-based, not permanent employment. While each project involves unique tasks, contributors may: - Design and evaluate rule application scenarios — reading a compliance artifact (advertisement, disclosure, policy) against a specific regulation and citing the exact subsection that applies or is violated; - Write sanctions alert disposition cases with structured false-positive reasoning documentation and escalation scenarios; - Build compliance testing scenarios: sample selection, test design, findings documentation, and examiner-ready conclusion memos; - Develop policy gap identification cases where an internal policy is silent on a regulatory requirement, contradicts the regulation, or has not been updated to reflect a recent change; - Document all test cases with verified regulatory citations to the specific subsection — never approximated, never fabricated. Qualifications - Degree in Law, Finance, Economics, Business Administration, Accounting, or any related field; - 2+ years of compliance, audit, legal, risk management, or financial services experience; - Current or recent experience in compliance & regulatory roles, financial crimes, or adjacent roles; - Citation discipline as a core habit — able to identify the exact regulatory subsection that applies and flag uncertainty rather than approximate; - CRCM, CAMS, or equivalent local credential is a strong positive signal; former regulatory examiner or inspector status is equally strong; - Strong written English (C1+). Requirements - This opportunity is a good fit for professionals with a background in compliance, regulatory affairs, legal services, or broader financial services who are open to part-time, non-permanent projects. Benefits - For this project, tasks are estimated to require around 10–20 hours per week during active phases, based on project requirements. This is an estimate, not a guaranteed workload, and applies only while the project is active. - On this project, contributors can earn up to $60 per hour equivalent, depending on their level and pace of contribution. - Compensation varies across projects depending on scope, complexity, and required expertise. Please note that other projects on the platform may offer different earning levels based on their requirements.