• Own and continuously improve the EMEA Customs & Trade Compliance program, ensuring compliance with customs regulations, AEO requirements, and customs authorizations across manufacturing and commercial sites. • Manage customs licenses, authorizations, and special procedures (e.g., AEO, IPR, End-Use), maintaining ongoing regulatory compliance. • Lead trade preference and non-preferential origin programs, including origin determination, supplier solicitations, customer certifications, FTA compliance, and duty optimization initiatives. • Monitor regulatory developments, assess business impacts, and promote the implementation of customs and trade compliance changes. • Provide expert guidance, training, and operational support to stakeholders on customs and trade compliance requirements. • Ensure compliant import and export operations through effective controls, procedures, systems, self-audits, and the management of customs master data (tariff classification, valuation, origin, licensing, etc.). • Conduct compliance reviews, support customs audits and government inquiries, and drive corrective actions to mitigate risk and strengthen processes. • Partner with customs brokers, freight forwarders, logistics providers, and internal stakeholders to ensure accurate customs filings and efficient operational execution. • Act as the regional subject matter expert for customs and trade compliance, leading projects, system enhancements (including SAP GTS), KPI reporting, root cause analysis, and continuous improvement initiatives.

• Perform daily AMS support activities, including user access provisioning, role maintenance, access troubleshooting, and responding to SAP security incidents and requests. • Analyze and resolve authorization errors across various SAP systems (ECC, S/4HANA, Fiori, BW, GRC, Cloud, etc.). • Manage requests to modify, create, or delete roles according to business and project needs. • Work with functional and technical teams to design and validate role changes, ensuring alignment with Segregation of Duties (SoD) and compliance standards. • Support GRC processes (Access Request Management, Access Risk Analysis, Emergency Access Management), when applicable. • Participate in regular client meetings and maintain clear communication on ticket status and resolution progress. • Follow and maintain appropriate documentation of AMS processes and the knowledge base. • Identify opportunities for process improvement or automation within the scope of Security & Authorizations (S&A) support.

Role Description The Cybersecurity Strategy & Compliance Advisor serves as a trusted advisor to executive leadership, supporting the development, implementation, and maturation of enterprise cybersecurity governance, risk management, and compliance (GRC) programs. This role provides strategic guidance on federal cybersecurity policies, emerging regulations, executive directives, and security frameworks while ensuring alignment between cybersecurity initiatives and organizational business objectives. The ideal candidate possesses extensive experience advising Chief Information Security Officers (CISOs) and senior executives, interpreting Executive Orders and federal cybersecurity mandates, and translating complex regulatory requirements into practical governance, security, and compliance strategies. This individual will play a key role in advancing Zero Trust initiatives, continuous monitoring capabilities, AI governance, and enterprise risk management across the organization. Key Responsibilities - Cybersecurity Strategy & Governance - Advise executive leadership and cybersecurity management on enterprise security strategy, governance, and risk management initiatives. - Align cybersecurity programs with organizational mission objectives, business priorities, and operational requirements. - Support the maturation of cybersecurity governance programs, policies, standards, and procedures. - Provide strategic guidance to Cybersecurity Strategy Center initiatives and cross-functional governance activities. - Develop executive-level briefings, strategic recommendations, and cybersecurity roadmaps. - Governance, Risk & Compliance (GRC) - Lead and support Governance, Risk, and Compliance (GRC) activities across the enterprise. - Develop, review, and maintain cybersecurity and privacy policies aligned with federal requirements. - Interpret and operationalize Executive Orders, Office of Management and Budget (OMB) memoranda, CISA directives, NIST guidance, and other federal cybersecurity mandates. - Ensure organizational compliance with: - Federal Information Security Modernization Act (FISMA) - NIST Risk Management Framework (RMF) - NIST Special Publications (including 800-53 and 800-37) - Zero Trust Architecture guidance - Federal cybersecurity policies and directives - Support third-party risk management and supply chain security initiatives. - Identify opportunities to automate compliance monitoring, evidence collection, and reporting activities. - Advise on Artificial Intelligence (AI) governance, security guardrails, and responsible AI implementation. - Assess cybersecurity impacts of new technologies and recommend appropriate security controls. - Continuous Monitoring & Authorization - Support modernization of Authorization to Operate (ATO) and continuous monitoring processes. - Develop strategies to automate security control assessments using NIST SP 800-53 controls. - Define technical controls suitable for automated assessment and continuous validation. - Evaluate security data sources including SIEM, endpoint detection, vulnerability management, and cloud security tools to improve continuous compliance monitoring. - Develop automated risk thresholds, monitoring criteria, and reporting mechanisms to support ongoing authorization. - Support alignment with FedRAMP 20X modernization initiatives and evolving federal cloud authorization requirements. - Research and provide recommendations for continuous monitoring of Artificial Intelligence systems consistent with Information Security Continuous Monitoring (ISCM) standards. - Evaluate automated monitoring solutions to identify anomalies, measure security performance, and improve organizational cyber resilience. - Stakeholder Engagement - Conduct cybersecurity education, awareness, communication, and outreach activities. - Collaborate with executive leadership, technical teams, compliance organizations, and external stakeholders. - Present complex cybersecurity concepts to technical and non-technical audiences. - Facilitate governance meetings, working groups, and strategic planning sessions. Qualifications - Bachelor's degree in Cybersecurity, Information Assurance, Information Technology, Computer Science, or a related field. - 5+ years of experience supporting federal cybersecurity governance, compliance, or enterprise security programs. - Demonstrated experience advising CISOs, executive leadership, or senior government officials on cybersecurity strategy. - Extensive knowledge of: - Federal Information Security Modernization Act (FISMA) - NIST Risk Management Framework (RMF) - NIST SP 800-53, 800-37, and related publications - Zero Trust Architecture - Information Security Continuous Monitoring (ISCM) - FedRAMP and cloud security authorization processes - Experience interpreting Executive Orders, OMB memoranda, federal cybersecurity directives, and government-wide security policies. - Experience developing cybersecurity policies, governance documentation, and compliance frameworks. - Familiarity with Governance, Risk, and Compliance (GRC) platforms and compliance automation tools. - Strong understanding of enterprise risk management principles and cybersecurity governance. Preferred Qualifications - Certified Information Systems Security Professional (CISSP) - Certified Information Security Manager (CISM) - Certified in Risk and Information Systems Control (CRISC) - Project Management Professional (PMP) - Experience supporting Treasury, DHS, or other civilian federal agencies. - Experience with Artificial Intelligence governance, AI security, or emerging technology policy. - Knowledge of SIEM platforms, vulnerability management solutions, endpoint detection and response (EDR), and cloud security monitoring technologies. Knowledge, Skills, and Abilities - Ability to interpret complex federal cybersecurity regulations and translate them into actionable organizational guidance. - Strong understanding of executive-level cybersecurity governance and risk management. - Exceptional analytical, policy development, and strategic planning skills. - Ability to balance regulatory compliance with operational and business objectives. - Strong written and verbal communication skills, including development of executive briefings and policy documentation. - Ability to lead cross-functional initiatives involving technical, operational, and executive stakeholders. - Demonstrated ability to evaluate emerging cybersecurity technologies, evolving federal mandates, and industry best practices to support informed, risk-based decision making. Compensation & Benefits - Competitive salary - Employer-paid health insurance premiums (medical, dental, vision) - Employer-paid short/long term disability insurance and basic life/AD&D insurance - 401K with a 4% employer contribution - Professional development reimbursement options available (training, certification, education, etc) - Flexible and remote work policies for most positions - Paid Time Off (PTO) at a rate of three (3) weeks plus one (1) day per year of service up to four (4) weeks annually - 11 paid holidays per calendar year - The anticipated salary range for this role is $100,000 - $155,000 per year, depending on experience and qualifications.

• Develop and execute innovative regulatory strategies that maximize development efficiency and increase probability of approval. • Serve as the primary regulatory contact with FDA for Contraline and other health authorities worldwide. • Lead all regulatory aspects of product development from preclinical stages through commercialization. • Provide strategic input when required into corporate planning, fundraising activities, business development transactions, and investor communications. • Participate in nonpromotional and promotional review as the Regulatory Affairs representative. • Build and scale the regulatory affairs function as the organization grows. • Lead preparation for regulatory agency meetings including Pre-IND, Type B, End-of-Phase 2, and Pre-NDA/BLA interactions. • Oversee preparation and submission of INDs, NDAs, BLAs, amendments, and global regulatory applications. • Provide regulatory leadership for drug-drug combination products and drug-device combination products. • Collaborate closely with Clinical Development, CMC, Quality, Nonclinical, Medical Affairs, and external partners. • Evaluate emerging regulatory risks and opportunities and provide proactive mitigation strategies. • Support diligence activities related to partnerships, licensing opportunities, and acquisitions.