• Oversee and enhance the Bank’s Compliance Management System (CMS) and compliance operations across deposit operations, commercial and consumer banking, and lending activities. • Serve as a subject matter expert in bank regulatory compliance with a strong focus on Deposit and Lending compliance. • Partner closely with business line leadership, risk management, and audit functions to ensure effective compliance oversight and approvals across the full lifecycle of banking products. • Prepare executive-level reporting for senior management, Risk Committee, and the Board on compliance trends and risks.

• Lead and continuously enhance the firm’s enterprise-wide compliance program, ensuring alignment with regulatory requirements and business objectives. • Develop and execute a strategic vision for the compliance function that supports growth and operational excellence. • Serve as a key advisor to the Chief Risk Officer, providing insights and recommendations on compliance risks, regulatory trends, governance, and program effectiveness. • Oversee compliance policies, procedures, monitoring, testing, training, surveillance, investigations, and issue management. • Manage regulatory exams, audits, inquiries, and reporting, ensuring thorough and timely engagement with internal and external stakeholders. • Serve as designated Chief Compliance Officer for regulated entities as assigned. • Collaborate with business, legal, risk, operations, and technology leaders to define and advance the future compliance operating model, integrating automation, AI, and digital workforce where appropriate. • Identify and implement technology-enabled solutions to reduce manual work, improve consistency, and enable compliance professionals to focus on higher-value activities. • Guide compliance frameworks and oversight practices to support the firm’s digital transformation and adoption of new technologies. • Promote a collaborative, inclusive, and high-performing culture within the compliance team. • Mentor and develop compliance leaders and staff, building organizational capability in anticipation of future needs. • Foster alignment and shared accountability across the compliance organization for an effective, unified program. • Champion innovation, continuous improvement, and responsible experimentation. • Escalate significant compliance issues and emerging risks transparently and promptly.

• Own compliance for all remote care programs (RPM, CCM, PCM, CoCM, BHI). • Lead the end-to-end payor audit lifecycle. • Own formal payor compliance intakes and medical device assessments. • Continuously mature the corporate compliance program against the OIG seven-element standard. • Act as the compliance voice in enterprise sales and client diligence. • Deliver decision-ready compliance analysis to the executive team. • Partner closely with the CISO on HIPAA privacy postures.

• Own the vendor and third-party risk lifecycle for a fast-scaling tech company, while supporting the wider GRC programme across ISMS, privacy, and compliance. • Third-Party Risk (Champion) — Own the full vendor risk lifecycle: due diligence, security questionnaires, risk rating, contractual safeguards (DPAs, security schedules), and ongoing monitoring. Maintain the supplier register and drive reassessment cadence based on criticality. • Supplier Assurance — Track fourth-party dependencies and concentration risk across critical suppliers, aligning oversight with DORA ICT third-party requirements and ISO 27001 supplier controls. • ISMS & Audit Readiness — Support policy maintenance, control mapping, and evidence collection to keep the Statement of Applicability (SoA) current and audit-ready across the entities and clients you cover. • Risk Management & RCSA — Execute risk assessments using an ISO 31000-aligned methodology and contribute to Risk & Control Self-Assessment workshops and remediation tracking. • Privacy Operations — Support RoPA maintenance, DPIAs, and data subject requests — with a focus on processor and controller arrangements with vendors and group entities. • Governance Reporting — Prepare third-party risk materials for governance committees and keep registers accurate, visible, and current.