• Conduct risk-based reviews and examinations of market participants, including Futures Commission Merchants (FCMs) and other intermediaries. • Assess participant compliance with applicable regulatory requirements, including supervisory and risk management frameworks (e.g., CFTC Regulation 1.11 and National Futures Association Rule 2-9). • Evaluate internal controls, governance structures, and escalation procedures of participants. • Identify compliance deficiencies and recommend corrective actions. • Maintain documentation of examination findings and follow-up activities. • Oversee compliance standards and requirements for onboarding new participants. • Ensure appropriate documentation, certifications, and representations are obtained and maintained. • Monitor ongoing participant obligations and periodic attestations. • Coordinate with internal stakeholders to ensure consistent application of eligibility and compliance standards. • Manage updates to the Exchange rulebook, compliance manual, and related policies and procedures. • Coordinate internal and external review of rule changes, including regulatory submissions where applicable. • Administer participant certifications and acknowledgments related to rulebook adherence. • Ensure policies and procedures are reviewed and updated on at least an annual basis. • Oversee the Exchange’s audit trail review program to ensure completeness, accuracy, and retrievability of required records. • Conduct periodic and annual reviews of audit trail data and associated controls. • Coordinate with surveillance and technology teams to address data integrity issues. • Ensure compliance with applicable recordkeeping requirements. • Coordinate preparation of regulatory reports and filings to the CFTC and other applicable regulators. • Support development of materials for the Board of Directors and Regulatory Oversight Committee (ROC). • Maintain documentation supporting compliance with applicable Core Principles. • Assist in preparation of the CRO Annual Compliance Report. • Maintain and enhance the Exchange’s overall compliance framework. • Ensure alignment between written policies and actual practices. • Track regulatory developments and assess impact on Exchange rules and procedures. • Support internal training and awareness related to compliance obligations.

About Us At Tutored by Teachers, we believe that when you put a teacher in front of a student, magic happens. Backed by some of the biggest names in EdTech including GSV, A-Street Ventures, and TMV, we are on a mission to close the opportunity gap and need a strong strategic, data-driven, and process-oriented member to support our compliance operations! You’re a person motivated by customer happiness and success and are looking to join a mission-driven, growing company, then this role is made for you! The Role This is not a traditional legal role. You will act as the internal quarterback across district contracts, insurance compliance, background check requirements, vendor agreements, and RFP submissions, partnering closely with Sales, Customer Success, Operations, Finance, and outside counsel. You’ll bring order, structure, and accountability to complex, high-volume processes that directly impact revenue, delivery, and risk. This role reports to senior leadership and works cross-functionally across the organization. Core Responsibilities District Contract Operations - Manage intake, tracking, version control, and execution of school district contracts - Coordinate redlines and approvals with outside counsel for non-standard terms - Maintain contract repository and key metadata (renewals, obligations, compliance items) - Partner with Sales and Customer Success to keep deals moving efficiently Insurance & District Compliance - Serve as primary liaison with insurance broker and carrier - Manage certificates of insurance, coverage letters, and district-specific requirements - Track compliance matrices across partners and ensure timely updates Background Check Compliance - Own relationships with background check vendors - Maintain district-by-district requirements - Track tutor compliance and problem solve in collaboration with TbT and school partners Commercial Vendor Contracts - Manage intake and first-pass review of vendor agreements - Route deviations or higher-risk terms to outside counsel - Coordinate execution and storage of finalized contracts RFP Process Ownership - Own RFP timelines and submission workflows - Partner with our grant writer on packaging and final delivery - Coordinate legal review as needed - Maintain RFP calendar and track outcomes Corporate Administration - Coordinate corporate registrations and filings through our registered agent - Maintain internal records and ensure good standing across jurisdictions What Success Looks Like - Contracts move faster and with fewer internal bottlenecks - Compliance requirements are centralized, documented, and predictable - RFP submissions are on-time and high-quality - Legal spend is controlled through smart triage and process discipline - Stakeholders across Sales, Ops, and Customer Service know exactly where things stand

• Monitor and ensure ongoing compliance with CySEC regulatory requirements, MiFID II, AML directives, and other applicable EU regulations (e.g. IFR, DORA etc). • Assist in the development, implementation, and review of compliance policies, procedures, and manuals. • Conduct compliance risk assessments and audits, and recommend corrective actions where necessary. • Support the preparation and timely submission of regulatory reports, notifications, and filings to CySEC and other authorities. • Advise management and business units on compliance-related matters and regulatory changes. • Liaise with CySEC and external auditors on compliance issues and inspections. • Perform ongoing monitoring of client transactions, KYC/AML reviews, and reporting of suspicious activities (SARs). • Provide compliance training and guidance to staff across all departments. • Contribute to the firm’s compliance monitoring program and assist in regulatory gap analyses. • Maintain a deep understanding of complex compliance risks/issues, identify root causes of inefficiencies, and develop effective process improvement strategies to streamline the operations teams’ processes. • Review Marketing Communication and advise on alignment of content with MiFID II marketing guidelines. • Review Professional clients applications according to MiiFID II standards. • Stay abreast on industry standards and CySEC/EU regulatory developments and consider application of regulatory requirements with a global focus, if necessary. • Perform any other duties as may be assigned by the direct manager and/or senior management.

• Own day-to-day execution of SOC 1, SOC 2, PCI DSS, and ISO 27001 readiness and audit cycles – including scoping, control testing, evidence collection, auditor coordination, and remediation tracking. • Develop and maintain policies, procedures, risk assessments, control narratives, and supporting documentation that meet auditor expectations and scale with the business. • Map controls across SOC, ISO, PCI, and NIST frameworks to identify overlap, gaps, automation opportunities, and control maturity improvements. • Facilitate risk assessments for systems, vendors, products, and business initiatives. Maintain risk registers, mitigation plans, and executive reporting on residual risk. • Partner with engineering and infrastructure teams to translate security requirements into practical technical controls across cloud infrastructure, SDLC, access management, logging, monitoring, and incident response. • Manage vendor security reviews, questionnaires, evidence validation, risk scoring, and ongoing monitoring for critical third parties and partners. • Support customer security reviews, security questionnaires, and trust documentation that enable enterprise sales and bank partnerships. • Help build scalable compliance workflows, tooling, and automation to reduce manual effort and improve evidence quality as Astra grows. • Maintain dashboards and reporting on audit status, control health, remediation progress, and risk posture for leadership.