Role Description Cresta is seeking a passionate individual with solid security engineering experience to support the security & compliance team and enable growing global data protection and cybersecurity efforts. - Lead and manage all customer-facing security conversations, partnering cross-functionally to ensure timely resolution of issues and seamless execution of the security review lifecycle within sales deals. - Perform risk assessments to identify gaps, come up with recommendations, and drive the gaps to remediation. - Streamline and lead SOC 2 Type II, ISO 27001/27701/42001, PCI-DSS, TISAX, HIPAA, and FedRAMP audit processes. - Perform internal audits and keep the necessary documentation updated as required for audits. - Perform gap assessments against new regions and target industry markets to comply with compliance regulations as the company expands. - Conduct new-hire and annual security awareness training to educate personnel and re-iterate security and compliance requirements. - Oversee and continuously improve the vendor risk management framework, ensuring effective identification, assessment, and mitigation of third-party risks. - Establish metrics to track compliance program effectiveness and to report risk. - Interface with both technical (Engineering/Product) and non-technical (Sales/Marketing/Customer Success) teams. - Respond to customer RFIs, questions, audits and technical documentation requests. - Help build our common control framework and drive adoption of the framework within the organization. - Build and automate processes to achieve continuous compliance over the technology control environment. - Assist with sales and marketing materials representing product security and compliance. Qualifications - 4+ years of experience in security governance, IT audit, or security compliance management - 3+ years of program management, with experience in affecting technology decisions - End-to-end experience going through SOC 2 Type II, HITRUST, HIPAA, TISAX, ISO 27001/27701/42001, FedRAMP, and PCI-DSS external audits - Experience in a hands-on technical role, with basic understanding of software implementation and integration - Experience with cloud environments on AWS, GCP, Azure - A track record of building relationships and credibility with business leads, external partners, and regulators through collaborative and independent programs - Experience managing competing efforts and requirements - Experience with fast-growing cloud native SaaS start-ups Requirements - Bonus: Experience with building GRC engineering tooling - Bonus: Experience with AI security frameworks such as AIUC Benefits - Comprehensive medical, dental, and vision coverage with plans to fit you and your family - Flexible PTO to take the time you need, when you need it - Paid parental leave for all new parents welcoming a new child - Retirement savings plan to help you plan for the future - Remote work setup budget to help you create a productive home office - Monthly wellness and communication stipend to keep you connected and balanced - In-office meal program and commuter benefits provided for onsite employees Compensation at Cresta Cresta’s approach to compensation is simple: recognize impact, reward excellence, and invest in our people. We offer competitive, location-based pay that reflects the market and what each individual brings to the table. The posted base salary range represents what we expect to pay for this role in a given location. Final offers are shaped by factors like experience, skills, education, and geography. In addition to base pay, total compensation includes equity and a comprehensive benefits package for you and your family. Salary Range: $160,000 – $180,000 + Offers Equity We have noticed a rise in recruiting impersonations across the industry, where scammers attempt to access candidates' personal and financial information through fake interviews and offers. All Cresta recruiting email communications will always come from the @cresta.ai domain. Any outreach claiming to be from Cresta via other sources should be ignored. If you are uncertain whether you have been contacted by an official Cresta employee, reach out to recruiting@cresta.ai.

• Advising our clients on corporate law, compliance and data protection matters • Drafting, reviewing and negotiating contracts and providing legal support for complex projects • Developing, implementing and further developing compliance management systems • Conducting compliance reviews, data protection audits and data protection impact assessments • Advising on the GDPR, the German Federal Data Protection Act (BDSG) and related regulatory requirements • Drafting and negotiating data protection agreements (e.g., data processing agreements, joint controller agreements and standard contractual clauses) • Managing data protection incidents and communicating with supervisory authorities

• Anticipate and interpret global regulatory developments, providing strategic guidance to senior leadership on potential impacts and opportunities. • Partner with cross-functional teams such as Engineering and Product to implement regulatory products that address the changing landscape, and anticipate future trends. • Design and oversee comprehensive regulatory product programs, ensuring adherence to applicable regulations, and industry standards. • Conduct thorough risk assessments to identify potential regulatory and operational risks. • Track emerging technologies and regulatory trends to identify opportunities for innovation in regulatory products. • Lead and coach a growing high-performing, diverse team.

Role Description Are you a compliance and legal leader with expertise in FMLA, ADA, Disability, Leave Management, and Accommodation Programs? We're seeking a strategic executive to lead compliance governance, regulatory oversight, and enterprise-wide disability and leave operations. - Lead compliance programs for FMLA, ADA, STD, LTD, Paid Parental Leave, and State Leave Programs - Translate complex regulations into scalable operational practices - Provide executive guidance on regulatory risk, litigation exposure, and compliance strategy - Partner with Operations, Legal, HR, Product, Quality, and Executive Leadership - Drive compliant, consistent, and high-quality service delivery Qualifications - Extensive disability and leave compliance expertise - Strong regulatory and legal interpretation skills - Executive leadership experience in compliance, leave administration, or employee benefits - JD preferred Benefits - Competitive base pay - Bonus/Incentive Pay and other Performance-Based Rewards, if applicable - Medical, Dental and Vision Plans - Prescription Drugs - HSA, HRA, and FSA Accounts - Paid Holidays, Vacation and Sick Leave - 401(k) Retirement Plan - Tuition Assistance - Paid Parental Leave - Supplemental Health Benefits - Enhanced Mental Health Support - Virtual Physical Therapy - Caregiving Services - Life Assistance Program - Training programs that promote continuous learning and career progression - Sustainability programs that give back to the communities in which we live and work - A culture of respect, collaboration, entrepreneurial spirit and inclusion