Role Description Ottimate is an AP automation AI tool that provides a smarter way for AP managers, approvers, controllers, and CFOs to work through the entire invoice lifecycle. - Client Verification: Help us get to know our clients by accurately identifying and verifying their information, using business and personal documentation. - Know Your Customer / Know Your Business reviews: Performing checks on our clients and service providers. Will be sorting through a high volume of requests. - Requires high attention to detail, and desire to suggest improvements to processes. - Communicate Compliance Requirements: Clearly explain why compliance matters to both our clients and internal teams, helping everyone stay informed. - Assess Client Risk: Conduct assessments to determine client risk levels, and address any alerts or issues quickly and accurately, in line with our policies. - Credit Assessment: Review financial documents to determine the appropriate credit limit for each client. - Collaborate Across Teams: Work with different departments to improve the overall customer experience. - Procedure Updates: You’re someone who wants to improve workflows of daily tasks without sacrificing quality. You make suggestion improvements based on data. - Manage Chargebacks: Review chargeback requests on the issuing side. Assist in evidence gathering and submission based on card brand rules. Qualifications - Bachelor’s degree in Finance, Business or related field and 2+ years working in AML, Fraud, Risk, or related field or 4+ years experience in lieu of a degree. - Must be able to pass a background check. - Experience working in the Fintech or banking industry. - Eye for Detail: You’re thorough and attentive, ensuring accuracy in every task. - Analytical Mindset: You’re comfortable digging into data to find insights and make informed decisions. - Open to feedback: You’re someone who is constantly wanting to improve their craft and seeks feedback on how you can improve. - Clear Communicator: You’re skilled at explaining complex information in simple terms, both in writing and verbally. - Sense of Urgency: You respond quickly and proactively to emerging issues. - Self-Starter: You’re a quick learner who can manage multiple projects and jump in to solve problems independently. - Team Player: “That's not my job” is not in your vocabulary. You’re always willing to lend a helping hand to other teams. - Tenacious Problem Solver: You think critically and independently. Ability to perform repetitive tasks with a high degree of accuracy and speed. - Knowledge of Regulations: You’re familiar with U.S. Customer Due Diligence (CDD) federal regulations. - Chargeback Familiarity: You know your way around the chargeback process and have a basic understanding of card brand rules. Benefits - Ottimate is an equal opportunity employer that is committed to diversity and inclusion. - We do not discriminate based on race, color, national origin, religion, gender, gender expression, sexual orientation, age, veteran status, disability status, or marital status. - If you are excited about the role but do not meet 100% of the qualifications listed above, we encourage you to apply.

Role Description HubSpot is seeking a Senior Third Party Risk & Integration Security Engineer to join our expanding IAM, Third Party Risk Management, and Enterprise Application Management team. This role is based on the idea of “external party security” and combines technical security assessment expertise in vendor risk management, focusing on evaluating third-party applications, emerging AI technologies, and integration security. The ideal candidate will conduct technical assessments of vendor security controls while also supporting broader software management and identity and access management initiatives across the organization. This role is remote; candidates must be based in the Eastern Time Zone (ET). What you’ll do - Third-Party Risk Assessment (Primary Focus - 60%) - Conduct technical security assessments of third-party applications, vendors, and service providers beyond traditional questionnaire-based reviews. - Evaluate API security, authentication mechanisms, data flows, and integration architectures for vendor solutions. - Assess generative AI vulnerabilities in third-party applications, including model security, data privacy, and information disclosure risks. - Perform security reviews of Model Context Protocol (MCP) servers and implementations. - Review vendor security documentation, architecture diagrams, and technical controls. - Identify security gaps and provide risk-based recommendations and guardrails to stakeholders. - Collaborate with procurement, legal, and business teams on vendor onboarding and ongoing monitoring requirements. - IAM & Enterprise Application Management (40%) - Support Shadow IT discovery and risk assessment initiatives using enterprise tooling. - Evaluate security risks associated with unsanctioned applications and browser extensions. - Assist with managing and reducing risk relating to non-human identity (NHI) including service accounts and API keys. - Assess access control implementations across enterprise applications and also members of HubSpot’s global contractor base. - Review OAuth grants, SAML configurations, and application integrations for security risks. - Support identity governance initiatives and access certification processes. - Collaborate and support the enterprise application management team on shared security initiatives. Qualifications - 5+ years of experience in application security, vendor risk management, cloud security, and/or related field. - Experience with security frameworks (NIST CSF, ISO 27001, SOC 2, etc.). - Strong understanding of API security (REST, GraphQL, authentication/authorization). - Strong understanding of IAM principles (RBAC, ABAC, least privilege) and modern authentication protocols (OAuth 2.0, SAML). - Experience with non-human identity management (service accounts, API tokens, certificates). - Understanding of SaaS architectures, access controls, and integration security. - Excellent prioritization, organization, and time management skills to suit a high-volume environment. - Understanding of LLM and generative AI security challenges and the emerging threat landscape. - Strong project management and communication skills to support a highly cross-functional work environment. - Working knowledge of privacy and compliance standards (GDPR, CCPA, HIPAA). - Background in technical due diligence or managing large-scale supplier security programs (preferred). - Certifications such as CISSP, CCSP, CISM, or CRISC are a plus. Benefits - Annual Cash Compensation Range: $95,600 — $143,400 USD. - Base salary, on-target commission for employees in eligible roles, and annual bonus targets under HubSpot’s bonus plan for eligible roles. - Participation in HubSpot’s equity plan to receive restricted stock units (RSUs) for some roles. - Potential eligibility for overtime pay. - Tailored individual compensation packages based on skills, experience, qualifications, and other job-related reasons.

• Review stop-loss claim notices and claimant medical records to identify high-cost trajectories before excess loss is incurred • Produce written clinical assessments that translate prognosis and treatment trajectory into actionable underwriting guidance • Advocate directly with stop-loss carrier partners for laser reduction or removal at renewal • Deliver clinical education to internal staff, TPA partners, and the adviser network on high-cost diagnoses

Role Description - Responsible for the daily overall monitoring of transaction risk control strategies, maintaining data dashboards, and conducting routine strategy operations to ensure the smooth and stable operation of the risk control system. - Assist risk control analysts in processing and extracting massive amounts of business data; perform data mining and deep analysis to accurately identify abnormal transaction behaviors and potential risk features. - Assist in tracking and evaluating the interception effectiveness and false positive rates (FP rates) of existing risk control strategies, providing data support for strategy iteration and optimization. - Assist in organizing daily risk control data and participate in drafting business risk analysis reports, as well as weekly and monthly updates. Qualifications - Current undergraduate or postgraduate students. Majors in STEM fields such as Statistics, Mathematics, Computer Science, Financial Engineering, or Big Data are preferred. - Possess solid data analysis capabilities; proficient in SQL to efficiently extract required data from databases; skilled in using Excel for data processing. - Highly sensitive to data, with excellent logical thinking and problem-solving/deconstructing skills; rigorous, detail-oriented, and possesses a strong sense of responsibility. - Strong communication and expression skills, a good team player, and able to integrate into the team quickly. Benefits - Study Growth Fund: We support your professional development and continuous learning. - Internal Events: Participate in regular team-building activities, workshops, and events designed to promote collaboration and innovation. - Global Collaboration: Be part of a diverse, international team, working alongside colleagues from around the world. - Career Advancement: Access opportunities for growth and advancement within a rapidly expanding global company. - Internal Mobility: Grow with us - Your long-term development is important to us. We offer internal job opportunities to help build your career path.