Role Description AlphaSense is maturing its security risk management program and needs a Senior Risk Analyst to be a core builder and operator of that function. You will design, implement, and mature a risk framework that spans information security, AI, and operational risk—building toward a program that is quantitative-leaning, connected to live data sources, and actionable at every altitude from service owner to executive leadership. You will establish risk identification and scoring methodologies, own the enterprise risk register, and produce risk intelligence that drives real decisions. You will also support the TPRM function led by a dedicated TPRM lead, contributing to assessments and risk tracking as needed. You approach this with an AI-native mindset: using AI to monitor threat landscapes, analyze risk data, draft risk narratives, and surface emerging risks faster than a traditional manual program could. The goal is a risk function, not a risk register—one that measures outcomes and reduced exposure, not just activity. This is not a role for someone looking to maintain a program that already exists. AlphaSense is building a risk management discipline that we believe can serve as the blueprint for how AI-era companies measure, communicate, and act on risk. Risk management across the industry is still largely qualitative, reactive, and disconnected from the systems that generate real signal. We intend to change that—and we want someone on this team who shares that ambition and wants to be part of building the model that others will eventually follow. Key Responsibilities - Risk Program Design & Maturation: Design and implement a structured risk management program, including risk taxonomy, scoring methodology, risk appetite statements, and escalation thresholds. Align the program with ISO 27005, NIST RMF, or ISO 31000 as appropriate. This is largely greenfield work—you will help define the architecture and continuously mature the discipline as the company scales. - Risk Register Ownership: Build and maintain the enterprise risk register as a living operational tool, not a compliance artifact. Lead periodic risk identification workshops with business, engineering, and legal stakeholders to surface new and evolving risks. Ensure every risk has a documented owner, risk rating, treatment decision, and remediation timeline—and that the register reflects current reality, not last quarter's snapshot. - AI-Augmented Risk Analysis: Leverage AI tools to monitor threat intelligence, identify patterns across risk data, accelerate risk narrative drafting, and keep the risk register current between formal review cycles. Build AI-assisted workflows that reduce manual risk review burden and surface emerging risks earlier. Apply judgment to validate AI output before it informs a risk decision. - Third-Party & Vendor Risk Support: Support the TPRM function in partnership with the dedicated TPRM lead. Contribute to vendor risk assessments, risk scoring, and finding documentation as needed. Provide risk framework input to ensure third-party risks are consistently rated and tracked in alignment with the broader risk register. - AI & Emerging Technology Risk: Identify and assess AI-related risks including data privacy, model bias, explainability, security misuse, agentic system behavior, and third-party AI dependencies. Support compliance with AI governance frameworks (ISO 42001, NIST AI RMF, EU AI Act). Maintain current knowledge of the evolving AI risk landscape and help AlphaSense stay ahead of regulatory and operational risks from AI deployment. - Risk Reporting & Executive Communication: Produce clear, executive-ready risk reports, dashboards, and periodic risk summaries. Translate technical risk findings into business impact language that drives informed decisions at the service owner, leadership, and board levels. Make risk actionable at every altitude—engineers understand their exposure, executives understand portfolio risk. - Cross-Functional Risk Advisory: Provide cross-functional risk and control guidance on process improvements, new technology adoption, post-implementation reviews, and remediation activities. Support stakeholders in interpreting risk requirements and embedding risk management practices into how they build and operate—not as a checkpoint, but as an enabling partner. What Success Looks Like - Security and compliance controls are clearly documented, tested, and consistently implemented—with evidence generated by integrations, not collected by hand. - Risks and compliance gaps are identified early, tracked with owners, and remediated in partnership with technical teams before auditors find them. - GRC processes scale alongside platform growth and new customer or regulatory requirements without proportional headcount growth. - Stakeholders across Engineering, Legal, and Product view the GRC function as a trusted, enabling partner—not a compliance checkpoint. - AI tools are used deliberately and responsibly: output is validated, sensitive data is protected, and automation creates leverage without introducing new risk. - The risk register is a live operational tool that reflects current exposure—engineers know their risk posture, executives can explain portfolio risk, and risk scores change when the environment changes. - Risk reporting is driven by KRIs and live data sources, not manually assembled status updates—leadership has real-time visibility into risk posture. Qualifications - 6+ years of experience in GRC, information security, risk management, or IT audit, preferably in a SaaS or cloud-native environment. - Strong understanding of security and compliance frameworks including SOC 2, ISO 27001, NIST CSF 2.0, and CIS Controls; working knowledge of ISO 42001 and NIST AI RMF. - AI-native mindset: you use AI tools—LLMs, agents, automation—for real, substantive work including analysis, drafting, evidence gathering, and workflow automation. - Proficiency with GRC platforms for evidence management and control testing (Drata, Vanta, AuditBoard, ServiceNow GRC, or equivalent). - Familiarity with cloud environments (AWS, Azure, or GCP) and the security and compliance posture tooling that runs on them (CSPM, SIEM, identity platforms). - Experience supporting external audits across security or privacy domains, including evidence collection, control walkthroughs, and auditor interaction. - Ability to interpret technical controls and translate findings into compliance, risk, and policy documentation that engineers and non-technical stakeholders both understand. - Working knowledge of risk registers, control libraries, and policy governance lifecycles. - Working knowledge of privacy and data protection requirements (GDPR, CCPA/CPRA) and how they intersect with security controls, in partnership with Legal and Product teams. - Strong written communication, analytical thinking, and attention to detail; able to produce clear audit responses, risk narratives, and control documentation under deadline. - 4+ years of hands-on experience in information security risk management or a combined GRC/risk role with responsibility for building or significantly maturing a risk register and scoring methodology. - Demonstrated use of AI or data tools to surface risk insights, analyze trends, draft risk narratives, or automate risk register workflows—with clear judgment about validating AI output before it informs a decision. - Proven experience maturing an organization's risk program from qualitative to quantitative risk measurement—including introducing scoring models, KRI frameworks, and data-driven risk reporting that changed how leadership makes risk decisions. - Experience with data warehousing concepts, KRI development and tracking, and risk reporting pipelines that connect live data sources to dashboards and executive reporting. - Proficiency with GRC platforms for risk tracking, control testing, and evidence management (Drata, Vanta, AuditBoard, ServiceNow GRC, or equivalent). - Strong analytical skills: comfort with qualitative and quantitative risk scoring, heat maps, likelihood/impact matrices, and risk appetite articulation. - Experience producing executive-ready risk reports and translating technical findings into business impact language for non-technical audiences. - Experience supporting TPRM assessments and contributing to vendor risk documentation in partnership with a dedicated TPRM function. Nice to Have - Relevant certifications: CISA, CRISC, CISM, CISSP, CCSK, or ISO 27001 Lead Auditor/Implementer. - Experience with AI governance frameworks including ISO 42001, NIST AI RMF, EU AI Act, or OECD AI Principles. - Exposure to SOX ITGC cycles—managing evidence, walkthroughs, and findings with external auditors. - Privacy program crossover: data mapping, DPIAs, GDPR/CCPA operational compliance. - Scripting or automation experience (Python, JavaScript, or low-code tools) applied to GRC or compliance workflows. - Quantitative risk experience: FAIR-style decomposition, Monte Carlo simulation, or loss exceedance analysis applied to real risk decisions—not just theoretical familiarity. - Experience with AI risk domains: model risk, algorithmic bias, AI system failure modes, agentic system risks, and governance frameworks including NIST AI RMF or ISO 42001. - Familiarity with risk aggregation and BI tooling (Tableau, Looker, Power BI) for risk dashboarding and executive reporting. - Background in financial services regulatory risk environments (SOX, FFIEC, or equivalent).

Role Description We are seeking intelligent, driven, and analytically minded EDD contractors to support our growing KYC/EDD team. The KYC/EDD team works with High Value Clients at one of the leading digital asset software platforms to reduce the risk for our customers and the company worldwide and combat fraud, money laundering and terrorist financing. - Request and review EDD documents from High Value users; - Review and risk-analyze High Value clients and their transactions; - Review customers’ verification to identify potential fraud, account takeover etc; - Perform Sanctions, PEP and Adverse media screening (including open search); - Work closely with our Product, Compliance, Data science and Customer success teams to further enhance our KYC EDD and other strategies as our team grows; - Filling escalation forms and SAR drafting; - Provide assistance with SOP drafting; - Deliver trainings to the new joiners; - Ad-hoc projects when required. Qualifications - An analytical mindset: you will be viewing large data sets and investigating customer accounts at a deep level; - At least one (1) year prior experience within Banking, FinTech, Compliance, Fraud or a degree in a relevant field; - English language skills, both spoken and written; - Flexibility. You will be working in a rapidly growing team that is required to provide true 24/7 coverage; - Basic Excel and MS Office skills; - Previous experience working in KYC, Compliance will be a plus; - Understanding of cryptocurrencies is advantageous but not required, as training will be provided; - Candidates must have access to an appropriate laptop with a camera or a webcam and a phone capable of running Google authenticator software; - Strong and reliable WiFi connection; - Candidates must be prepared to submit to further background / security checks if required. Benefits - Competitive compensation, in cryptocurrency. - The opportunity to progress for high performers. - Remote working. - HMO on 1st day. Schedules Hours offered will depend on the volume of work coming into the team and individual performance. Working patterns may change as the markets we support are global, but this may include day/night shifts and some weekend work. This is a self-employed contractor role available only to candidates in jurisdictions where they are eligible to be compensated in cryptocurrency. You are responsible for your own tax declarations. Please ensure you are able to receive payment in cryptocurrency and understand how to cash this out if so required.

Title: Senior Analyst, Compensation - Hybrid Location: Charlotte, NC, US, 28277 Workplace: Corporate Department: P3-Senior Professional Job Description: Charlotte, NC, US, 28277 What you’ll need to succeed as a Senior Analyst, Compensation at XPO Minimum qualifications: - Bachelor's degree or equivalent related work or military experience - 2 years of progressive compensation experience. - Experience with compensation modeling, budgeting, forecasting, and market pricing. - Experience with Microsoft Office Applications such as Microsoft Word and Excel, including complex formulas, PivotTables, Vlookups, and data analysis. Preferred Qualifications - Bachelor's degree in Human Resources, Business Administration, Finance, Economics, or a related field - Master's degree in Business Administration, Human Resources, Finance, Economics, or a related discipline. - Certified Compensation Professional (CCP) certification or progress toward certification. - 3+ years of compensation experience in a corporate environment. - Strong analytical skills with the ability to interpret complex data and translate findings into business recommendations. - Ability to manage multiple priorities while maintaining a high degree of accuracy and confidentiality. - Ability to analyze large, complex datasets from multiple sources and present meaningful insights to leadership. About the Senior Analyst, Compensation job Pay, benefits and more: - Competitive compensation package - Full health insurance benefits are available on day one - Life and disability insurance - Earn up to 15 days of PTO over your first year - 9 paid company holidays - 401(k) option with company match - Education assistance - Opportunity to participate in a company incentive plan What you’ll do on a typical day: - Partner in the design, maintenance, and continuous improvement of the company's compensation programs, including salary structures, variable pay programs, compensation policies, and salary administration processes. - Perform financial modeling and compensation analyses to evaluate the effectiveness, affordability, and competitiveness of compensation programs. - Develop and maintain compensation metrics, dashboards, and reporting tools to provide actionable insights and support data-driven decision-making. - Conduct market pricing analyses for new and existing positions using industry salary surveys and market data. - Evaluate external market trends and internal pay practices to recommend competitive compensation strategies that align with the company's mission, values, and business objectives. - Consult with HR Business Partners and managers on compensation recommendations, policies and job evaluation. - Participate in job evaluations to ensure internal equity and consistency across the organization. - Develop communication materials and educational resources that help leaders and employees understand compensation programs, philosophy, and processes. - Manage participation in annual compensation surveys, including Johanson, Willis Towers Watson, Mercer, MarketPay, and CompAnalyst, ensuring accurate job matching and timely survey submissions. - Support and administer the annual compensation planning process, including merit increases, incentive planning, system configuration, data validation, reporting, and manager support. - Assist with compensation audits, and regulatory compliance initiatives. This role is posted with Charlotte, NC as the preferred work location. However, XPO welcomes applications from and may consider qualified candidates based in other locations for on-site, hybrid, or remote work arrangements, depending on business needs and the requirements of the role. About XPO XPO is a top ten global provider of transportation services, with a highly integrated network of people, technology and physical assets. At XPO, we look for employees who like a challenge and can communicate effectively in all situations. We want to leverage your skills and years of experience to drive positive results while ensuring a bright future for yourself and XPO. If you’re looking for a growth opportunity, join us at XPO. We are proud to be an Equal Opportunity employer. Qualified applicants will receive consideration for employment without regard to race, sex, disability, veteran or other protected status.

Role Description The Real Estate Contract Portfolio Analyst provides ongoing governance and analytical oversight of OnTrac’s commercial real estate contract portfolio. This role reviews lease and contract obligations, analyzes rent, OPEX, CAM, utilities, maintenance, and vendor-related spend, and identifies cost trends, variances, risks, and required actions. The Analyst produces executive-level reporting, including weekly portfolio flash updates, and partners with Real Estate, Legal, Finance, Procurement, and Operations to support portfolio decisions, renewal planning, budget visibility, compliance, and issue resolution. Success in this role requires strong financial analysis, contract interpretation, sound judgment, and the ability to turn complex portfolio information into clear leadership recommendations. Qualifications - Bachelor’s degree in Business, Finance, Real Estate, Legal Studies, Supply Chain, Operations, or a related field, or 3–5 years of experience in commercial real estate, contract management, financial analysis, procurement, operations analytics, or a related function - Working knowledge of commercial real estate contracts, lease terminology, vendor obligations, cost structures, and contract lifecycle concepts - Strong financial and analytical skills, including variance analysis, trend identification, budget-to-actual review, YoY comparison, and executive-level reporting - Advanced proficiency in Excel - Experience with Power BI, lease administration systems, property management platforms, ERP tools, ClickUp, or similar reporting/work management tools preferred - Ability to interpret contract and financial information, identify risk, develop options, and communicate clear recommendations to leadership Requirements - Analyze portfolio financial performance: - Review rent, OPEX, CAM, utilities, maintenance, and other site-level costs; identify YoY increases, budget variances, and trends that require corrective action or escalation. - Produce leadership reporting: - Prepare weekly real estate portfolio flash updates covering spend trends, renewal risks, upcoming obligations, key decisions, recommended actions, and other executive-level insights. - Review contracts and obligations: - Evaluate lease and contract terms to assess financial, operational, and compliance impact, and provide recommendations to Real Estate, Legal, Finance, Procurement, and Operations stakeholders. - Monitor portfolio risk: - Track renewal dates, escalation clauses, notice requirements, vendor obligations, service gaps, cost increases, and compliance concerns, prioritizing issues based on business impact. - Support financial planning: - Partner with Finance on forecast reviews, accrual validation, budget variance explanations, and business cases tied to real estate spend and portfolio actions. - Improve governance and reporting: - Recommend process improvements, reporting frameworks, control mechanisms, dashboards, templates, playbooks, and best practices for portfolio governance and contract performance monitoring. - Maintain data quality: - Improve contract and portfolio data completeness, reliability, and usability to support accurate reporting, risk identification, and leadership decision-making. - Coordinate cross-functional alignment: - Collaborate with Legal, Procurement, Finance, Real Estate, and Operations to align contract terms, vendor activity, portfolio decisions, and site-level needs with business objectives. - Lead issue resolution: - Assess root causes, frame options, recommend actions, and coordinate stakeholder follow-up through closure for assigned portfolio matters. Benefits - Medical, dental, and vision insurance - Life and short- and long-term disability coverage - 401(k) retirement savings plan with company match - Flex vacation in states other than CA, CO, IL, MA, MT, and NE, with accruals up to 96 hours for first year of employment with tenure-based increases up to 160 hours - Two (2) floating holidays per year - Paid sick leave* - Six (6) paid company holidays - Two (2) weeks paid pregnancy disability leave, four (4) weeks paid parental bonding leave - Additional wellness and employee assistance programs