Role Description We're looking for a Director of Fraud & Compliance Operations to own the strategic vision and operational execution for the full lifecycle of fraud prevention and regulatory compliance at Quo. This is not a siloed Compliance function. It sits at the intersection of Product, Engineering, Legal, Support, and carrier relationships and the person in this role will be expected to operate across all of them. You'll lead a team of Compliance specialists, manage our most critical external partnerships, and be the final decision-maker on the highest-stakes cases that come through our platform. You'll report directly to leadership and be a key voice in how Quo manages risk as we continue to grow. If you are passionate about building a fraud operations team at a high growth company, we want to hear from you! - Fraud Detection & Rule Management - Own the fraud strategy across our tooling, review queues and data pipelines. - Work closely with the data team to build, test, and tune detection rules — balancing catch rate against false positive impact. - Monitor queue performance daily and drive continuous improvement across automation and manual review workflows. - Be the final call on complex, high-stakes cases — including compromised accounts, carrier-level violations, and high-value customer escalations. - Apply a consistent, policy-anchored framework while maintaining the judgment to know when to extend grace and when to be firm. - Regulatory Compliance - Maintain Quo's compliance posture across TCPA, A2P 10DLC, SHAFT content policy, STIR/SHAKEN, CCPA/CPRA, and evolving state-level telecom regulations. - Stay current on carrier policy changes, regulatory updates, and industry developments — and translate them into operational action before they become issues. - Own policy development, documentation, and enforcement across the platform. - Conduct root cause analysis on escalated incidents and maintain Quo's standing as a trusted, proactive compliance partner. - Team Leadership - Lead and develop a team of fraud investigators and compliance specialists. - Set team priorities, run weekly syncs, conduct 1:1s, and own performance development. - Make capacity planning decisions and advocate for headcount as volume requires it. - Cross-Functional Alignment - Partner with Legal on regulatory inquiries, subpoena responses, and policy interpretation. - Work with Product and Engineering on compliance-relevant features. - Collaborate with Support and CS on customer-facing compliance communications and high-value account handling. Qualifications - 8+ years in fraud operations, financial crimes compliance, trust & safety, or telecom compliance — with at least 3 years in a leadership role managing a team. - Hands-on experience with fraud tooling (ideally Sift or comparable platforms) and data-driven rule management. - Deep familiarity with at least one of the following regulatory frameworks: TCPA, A2P 10DLC/carrier compliance, SHAFT content policy, AML/KYC, or financial crimes compliance. - Demonstrated ability to make high-quality decisions under uncertainty on complex, ambiguous cases. - Strong written communication — you'll be corresponding with ecosystem partners, responding to regulatory inquiries, and setting the tone for customer communications. - Experience managing BPO or distributed operations teams. Requirements - Direct experience in a telecom, CPaaS, or VoIP compliance context — or significant experience as a carrier or telephony ecosystem partner. - Familiarity with SQL or data tools (Snowflake, dbt) for monitoring and investigation. - Experience with content classification, AI-assisted fraud detection, or LLM-based tooling in a compliance workflow. - Background working in a high-growth startup or scale-up environment where the program was still being built. Benefits - The annual base salary range for this position is as follows, plus equity and benefits: - SF Bay Area, Los Angeles, Seattle, Portland, Boston, New York, and Washington, DC Metro: $198,000- $233,000 USD. - All other US Locations: $178,000 - $210,000 USD. - Canada: $175,000 - $206,000 CAD. - Your total rewards package will include equity, extensive medical coverage, a monthly lifestyle stipend, and a flexible PTO policy.

• Lead complex environmental compliance and due diligence projects • Serve as a technical leader, project decision-maker, and client advisor • Conduct and oversee Phase I ESA site visits and compliance assessments • Provide technical review of reports prepared by others and support development of advanced review capabilities • Develop and maintain long-term client relationships and act as a trusted advisor

Role Description We are seeking a senior UK Compliance Officer / MLRO to partake in a leading role for the regulatory build-out of our UK business. This role will be responsible for helping shape our UK regulatory strategy, establishing the compliance and financial crime framework required for authorisation, and serving as the go-to compliance lead as the business scales. This is a hands-on role requiring someone who understands both regulatory expectations and practical implementation, with the credibility to engage regulators and challenge business stakeholders. Depending on the individual's experience and capabilities, the role may also assume global functional responsibilities across areas such as compliance assurance, regional compliance advisory, and the development of group-wide compliance frameworks and standards. Key Responsibilities - Lead the compliance and financial crime workstreams required to support UK regulatory authorisation / licensing. - Advise the business on UK regulatory requirements, operating model expectations, governance, and control framework design. - Build and implement the UK compliance framework, including AML, sanctions, and financial crime framework from the ground up. - Act as the subject matter lead on regulatory readiness, including policies, procedures, governance, risk assessments, monitoring, and reporting frameworks. - Engage with regulators and external advisors on licensing, supervisory expectations, and regulatory submissions. - Provide practical regulatory advice on products, customer journeys, partnerships, and business initiatives intended for the UK market. - Partner with Legal, Product, Risk, Operations, and AFC teams to ensure regulatory requirements are appropriately embedded. - Serve as the proposed MLRO / Compliance Officer for the UK entity, subject to regulatory approval. Qualifications - Significant senior compliance and financial crime experience within UK regulated financial services. - Strong working knowledge of FCA expectations, UK AML / sanctions obligations, and regulatory governance frameworks. - Prior experience holding SMF16 (Compliance Oversight), SMF17 (MLRO), or equivalent senior regulatory responsibilities is required. - Bachelor's degree required. LLB (Bachelor of Laws) strongly preferred. - Experience leading regulatory authorisations, licensing applications, or regulated entity setup. - Ability to operate strategically while remaining hands-on in execution. - Strong judgement, stakeholder management, and decision-making capability. - Demonstrated interest in, and practical adoption of, AI technologies to enhance compliance, regulatory, or operational effectiveness will be viewed very favourably. Profile - Prior MLRO / Compliance Officer or equivalent senior control function experience. - Strong UK regulatory credibility gained within banks, asset managers, investment firms, brokerages, or other FCA regulated financial institutions. Experience within crypto, digital assets, fintech, or payments firms is advantageous. - Practical, commercially minded operator who can build from scratch and work hands-on. - Demonstrated capacity to support or assume global functional responsibilities, including cross-border compliance assurance (e.g. group-level policy ownership, second-line oversight across multiple jurisdictions) and/or regional advisory functions (e.g. serving as the primary compliance point of contact for APAC, EMEA, or other regional business units). Suitable candidates will have experience operating within a matrix structure, advising regional teams on local regulatory requirements while maintaining alignment with group-wide standards and risk appetite. Benefits - Study Growth Fund: We support your professional development and continuous learning. - Internal Events: Participate in regular team-building activities, workshops, and events designed to promote collaboration and innovation. - Global Collaboration: Be part of a diverse, international team, working alongside colleagues from around the world. - Career Advancement: Access opportunities for growth and advancement within a rapidly expanding global company. - Internal Mobility: Grow with us- Your long-term development is important to us. We offer internal job opportunities to help build your career path.

• Own the full lifecycle of ISO 27001, SOC 2 Type II, C5, PCI-DSS, and Cyber Essentials certifications: scoping, evidence library, audit coordination, management responses, and remediation tracking. • Own the GDPR operational compliance framework: DPIA process, LIA and TIA governance, RoPA maintenance, breach response documentation, and cross-border transfer mechanisms in collaboration with the DPO. • Maintain active compliance frameworks for DORA, NIS2, HIPAA, CCPA/CPRA, and the EU Data Act, maintaining current obligation tracking and client assurance artefacts. • Own breach and incident response governance end to end: process, regulatory notification decision support, Art. 33/34 documentation, and the regulatory notification register. • Drive control owner accountability without direct authority: translate regulatory obligation into business consequence, manage evidence deadlines, escalate where necessary. • Manage the ISMS evidence library, own the certification body relationship for ISO 27001 and C5. • Coordinate SOC 2 Type II readiness: TSC scoping, evidence collection, auditor engagement, report distribution, and management response drafting. • Maintain the RoPA, conduct DPIAs and LIAs, and manage data subject rights governance under GDPR. • Track and implement obligations under DORA, NIS2, HIPAA, CCPA/CPRA, EU Data Act, and Cyber Resilience Act as live regulatory requirements, not awareness items. • Coordinate BAA execution and PHI obligation documentation with Legal for healthcare accounts. • Run the compliance deliverable tracker; close loops on evidence collection without being managed. • Translate regulatory obligations into plain-language business impact and secure timely responses from technical and product stakeholders who do not report to this role. • Manage the end-to-end coordination of client compliance audits: evidence packs, management responses, findings remediation. • Maintain and administer the GRC automation platform, including uploading evidence and monitoring control status.