• Lead client engagements as the primary compliance advisor and point of contact, managing multiple relationships simultaneously and keeping every engagement on track • Prepare and submit periodic call reports for money transmitter clients • Handle MU1, MU2, MU3, and MU4 filings — including new applications, amendments, and control person changes — with accuracy and timeliness • Prepare and submit ACN filings and other ongoing regulatory notifications • Manage state money transmitter license applications, renewals, surety bond renewals, and annual reporting across multiple jurisdictions • Maintain license tracking systems and compliance calendars so nothing slips through the cracks • Translate complex regulatory requirements into clear, actionable guidance clients can actually use • Design, implement, and continuously improve compliance programs tailored to each client's business model and regulatory obligations • Monitor federal and state regulatory developments, assess their impact, and proactively communicate implications to clients • Support clients through state regulatory examinations, information requests, and deficiency responses • Draft responses to regulator inquiries and coordinate remediation efforts from start to finish • Coordinate with internal teams to deliver integrated, high-quality client solutions

Role Description The Claims / Regulatory Analyst is responsible for researching and supporting complex utility damage claims, regulatory inquiries, compliance investigations, and risk mitigation activities. This position serves as a key resource within the Claims and Compliance Department, enhancing claim resolution with customers, auditing damage investigations and root cause analysis, responding to regulatory compliance inquiries, and the development of defensible documentation. The role supports organizational growth through oversight of compliance programs, regulatory response management, customer and stakeholder engagement, and governance of technology-driven initiatives to enhance quality. This position works closely with operations, customers, regulatory agencies, utility owners, contractors, and industry organizations to analyze trends and assist department management to mitigate company liability and risk, and ensure consistent application of company policies, contractual obligations, and regulatory requirements. Qualifications - Bachelor's degree in Business, Risk Management, Legal Studies, Safety, Utility Operations, or a related field; equivalent industry experience may be substituted. - Experience conducting complex investigations and preparing defensible documentation. - Strong understanding of utility locating practices, damage prevention principles, and one-call/811 regulations. - Experience interacting with customers, contractors, regulatory agencies, and insurance representatives. - Proficiency with Microsoft Office applications including Outlook, Excel, Word, and PowerPoint. - Strong written and verbal communication skills. - Strong problem-solving skills. - Ability to manage multiple priorities and deadlines in a fast-paced environment. Requirements - Analyze data and emerging trends. - Assist division Director to assess liability and develop defensible determinations. - Interpret contracts, regulations, policies, and technical documentation. - Apply regulatory compliance and risk management principles. - Engage in negotiation and conflict-resolution regarding Claims and regulatory matters. - Communicate effectively with executives, customers, regulators, and field personnel. - Demonstrate sound judgment and independent decision-making. - Uphold commitment to accuracy, consistency, and continuous improvement. Company Description

• Lead the governance, risk, and compliance function across security policies, standards, risk management, audits, third-party risk, and control operations. • Develop, maintain, and operationalize global security policies, standards, procedures, control documentation, and exception processes. • Own audit readiness and ongoing compliance programs across frameworks such as SOC 2, ISO 27001, GovRAMP, PCI DSS, HIPAA, NIST CSF, NIST 800-53, CCPA/GDPR, and other customer or regulatory requirements. • Lead GovRAMP and PCI DSS readiness, including control mapping, evidence collection, remediation tracking, stakeholder coordination, audit preparation, and audit support. • Coordinate audit evidence collection, control testing, remediation tracking, auditor communication, and management responses. • Maintain the security risk register, including identification, assessment, ownership, remediation, acceptance, exception tracking, and executive reporting of security risks. • Partner with control owners across Security, IT, Engineering, Legal, HR, Finance, Product, and Operations to ensure control effectiveness and accountability. • Manage third-party and supply chain risk management, including vendor security reviews, due diligence, risk assessments, contract security input, and remediation tracking. • Support customer security reviews, questionnaires, trust center content, security documentation, and customer-facing compliance responses. • Develop metrics and dashboards for audit status, control health, risk posture, vendor risk, policy exceptions, compliance readiness, and remediation progress. • Support incident response and privacy incident processes by ensuring regulatory, contractual, audit, and customer notification obligations are understood and tracked. • Partner with the CISO to communicate security posture, compliance progress, key risks, control gaps, and trade-offs to executives, customers, auditors, and regulators. • Drive continuous improvement of the GRC operating model, including automation, evidence reuse, control rationalization, risk prioritization, and policy lifecycle management.

• Maintain Continuous Observation: Uphold our SOC 2 Type II standard using automated monitoring to ensure compliance is a constant state, not an annual event. • Technical Infrastructure Strategy: Directly satisfy the high-bar technical requirements of ITAR and FedRAMP. • Bridge the "Speed vs. Standard" Gap: Act as a technical enabler for the Engineering team, designing and implementing controls (e.g., change management, access reviews) that satisfy auditors but don’t bottleneck our Engineering or DevOps teams. • Lead Global Expansion: Architect and execute the technical and procedural implementation of TISAX, ITAR, and FedRAMP. • GDPR Stewardship: Act as the internal authority on privacy, ensuring our data mapping and PIAs remain current without adding unnecessary friction. • Customer Trust & Sales Support: Join calls with customer Infosec counterparts and handle technical vendor questionnaires to prove our security posture can be trusted by the world’s most demanding organizations. • Individual Contributor Ownership: Act as a "department of one". You will write the policies, perform the risk assessments, and manage the audits yourself.