Role Description The Senior Compliance Manager is responsible for leading complex compliance activities, ensuring adherence to regulatory requirements, and providing expert guidance across the organization. This role oversees reporting, filings, and regulatory responses, including audits and consumer complaints, while developing and enhancing policies, procedures, and controls to support a strong compliance framework. This is a senior, cross-functional role that partners with internal teams to interpret regulations, mitigate risk, and drive strategic compliance initiatives aligned with business objectives. The Senior Compliance Manager also monitors regulatory developments, supports process improvements, and helps build a scalable, efficient compliance function. Responsibilities - Resolve complex regulatory compliance matters, conducting comprehensive research, and making informed decisions. - Monitor legislative and regulatory changes applicable to Cover Whale’s business, communicate their impact to the organization, and design solutions to mitigate regulatory compliance risks. - Develop and enhance compliance policies, protocols/procedures for Cover Whale’s core business, as well as new business initiatives, to support strong regulatory compliance posture. - Conduct regular compliance risk assessments to evaluate adherence to Company compliance policies and develop strategies to mitigate identified risks. - Lead the creation, certification, and timely forwarding of Compliance reports to partners internally, ensuring data accuracy and efficient issue-logging. - Independently manage the preparation of accurate and timely responses to insurance consumer complaints received from the State Department of Insurance, BBB, and directly from consumers, ensuring accuracy and compliance with applicable regulations for both consumer complaints and coverage disputes/compliance escalations. - Manage corporate governance and Secretary of State obligations across all entities, including annual reports, good-standing maintenance, registered-agent administration, and entity formations and name changes. - Manage and oversee (i) insurance producer and entity licensing (resident and non-resident), appointments, and licensing-driven commission gatekeeping for Cover Whale, its carrier partners and agents and (ii) OFAC, AML and other mandatory screening requirements. - Oversee compliance with other mandatory reporting and filing requirements – including surplus line taxes, FMCSA, and other state and federal transportation-related filings. - Develop and facilitate compliance training programs for employees to enhance compliance awareness and competence. - Prepare and provide comprehensive materials and information for internal and external regulatory audits, data calls, surveys, and investigations, and draft detailed responses. - Regularly monitor and analyze regulatory developments and best practices in the insurance and corporate governance sectors to address any changes; build and maintain the Regulatory Change Management process. - Collaborate with management to develop and implement strategic compliance initiatives that align with organizational goals. Verify and ensure that corrective actions are effectively implemented to confirm that mitigation plans are successful. - Actively incorporate AI and other emerging technologies into daily workflows to drive efficiency and innovation, while maintaining sound judgment, data integrity, and compliance standards. Qualifications - 8 to 10 years of compliance experience working for property & casualty (P+C) insurance business/insurance intermediary (ideally in both Admitted and Excess & Surplus lines basis). - Bachelor’s degree from an accredited university (Legal degree preferred). - Experience in commercial auto insurance segments preferred. - In-depth knowledge of the industry's standards and regulations. Must-Have Skills/Abilities - Excellent written and verbal communication skills. - Deep knowledge of insurance regulatory requirements in the P+C insurance space (admitted + surplus lines). - Ability to analyze complex regulations and problems, exercise strong judgment and develop solutions to balance compliance risks with business goals. - Strong organizational skills and ability to take initiative on compliance projects. - Methodical and diligent with prioritizing and executing on compliance obligations. - Sound judgment and high ethical standards. Working Conditions This role is primarily remote (work from home) and requires a dedicated workspace with reliable internet access. The position requires regular virtual collaboration with cross-functional teams and leadership. Occasional travel may be required for company meetings, offsite planning sessions, or business initiatives. Must be able to work Eastern Standard Hours. Benefits - Annual discretionary bonus opportunity. - Comprehensive health, dental, and vision insurance. - 401(k) company match up to 4%. - Generous paid time off and company holidays.

• Responsible for building and leading cross-functional quality assurance systems across Loyal teams with an emphasis on FDA-CVM regulatory compliance for drug submissions and products. • Own the design, administration, and continuous improvement of the electronic QMS, including validation status, user access, workflow configuration, and system health. • Maintain, monitor, and continuously improve the company’s eQMS in alignment with GxP quality principles. • Ensure eQMS documentation (e.g., SOPs, forms, work instructions, policies) is current, compliant, and effectively implemented across departments. • Oversee document control processes, including drafting, reviewing, approving, and archiving quality documents. • Drive periodic reviews and revisions of quality documents to ensure ongoing compliance and operational relevance. • Own the CSV/CSA program for GxP computerized systems, ensuring systems are validated commensurate with risk and intended use. • Review and approve validation plans, protocols, and summary reports for new system implementations, upgrades, patches, and configuration changes. • Partner with IT/GxP Systems and system owners to define validation requirements for new tools and integrations before go-live.

• Own RMF authorizations across Department of War components and FedRAMP High, alongside CMMC 2.0 and SOC 2 compliance for corporate systems • Maintain authorization and audit evidence, including SSPs, SARs, POA&Ms, STIGs, and control mappings • Partner with Engineering, Product, and Security to embed compliance requirements into system design and CI/CD workflows, not bolt them on afterward • Coordinate internal assessments and external audit readiness across all applicable frameworks • Track regulatory and contractual changes and advise leadership on what they mean for Onebrief • Run risk assessments and vendor/supply chain risk reviews across both federal and corporate environments

• Maintain and improve the QMS. • Manage controlled documents, policies, procedures, templates, and SOPs. • Coordinate document reviews, version control, approvals, and updates. • Track corrective and preventive actions (CAPA). • Support PMO governance and process standardization. • Support CMMI, CMMC, ISO 9001, ISO 20000, ISO 27001, and customer-required frameworks. • Maintain evidence repositories and compliance documentation. • Coordinate evidence collection and audit readiness. • Track remediation actions and gap assessments. • Monitor contract deliverables and reporting requirements. • Maintain compliance calendars and milestones. • Support startup, transition, and closeout activities. • Review contract requirements for operational impacts. • Track SLA, KPI, and Quality Control Plan compliance. • Plan and coordinate internal audits. • Support external certification audits. • Track findings through closure. • Prepare audit reports and executive summaries. • Review project documentation for quality and completeness. • Support governance reviews and project health assessments. • Maintain PMO templates and standards. • Capture lessons learned and improvement opportunities. • Develop dashboards for compliance, audits, certifications, contract performance, and PMO maturity. • Provide monthly executive reporting. • Maintain centralized compliance repositories. • Support document retention requirements. • Keep templates and policies current.