• Help design, document, and operate first-line controls across auto servicing, repossession, recovery, and dealer/channel oversight. • Perform duties tied to auto servicing compliance functions to meet applicable regulatory obligations across loan servicing initiatives and strategies. • Identify compliance issues and support timely, sufficient remediation — reviewing action plans and documentation tied to event closure. • Build and maintain monitoring routines, reporting, and metrics (KPIs/KRIs) that surface emerging risk across servicing and related channels. • Support complaint oversight and translate findings into control and process improvements. • Reduce complex, judgment-heavy compliance requirements into scalable, technology-friendly requirements that business and engineering teams can execute consistently. • Partner closely with Product, Engineering, Risk, Legal, Operations and 2LOD Compliance to strengthen business-owned oversight in support of an OCC-aligned 1LOD framework. • Serve as an internal advocate for compliance, and be fintech-forward — identifying tools and automation that improve the efficiency and quality of compliance reviews. • Prepare and support reporting for the compliance program and the broader servicing organization.

Role Description The Associate, Compliance Advisor supports Quzara's cybersecurity advisory practice by assisting federal and commercial clients with implementing, maintaining, and assessing security and compliance programs. This role supports security assessment and authorization (SA&A) activities, continuous monitoring, and governance initiatives across frameworks including FedRAMP, NIST RMF, FISMA, and DoD IL4/5. - Works closely with engineering teams, compliance advisors, auditors, and client stakeholders. - Helps identify compliance gaps, validate security control implementation, coordinate remediation efforts, and develop documentation required to support authorization and ongoing compliance. - Requires strong analytical abilities, excellent documentation skills, and effective communication with both technical and non-technical stakeholders. Qualifications - Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field. - Minimum 1–3 years of experience supporting cybersecurity compliance, governance, risk management, or security assessment activities within federal or regulated environments. - Working knowledge of: - FedRAMP - NIST SP 800-53 - Risk Management Framework (RMF) - FISMA - DoD IL4/IL5 (preferred) - Experience supporting Security Assessment & Authorization (SA&A) or Authorization to Operate (ATO) activities is preferred. - Experience developing and maintaining security documentation including SSPs, SOPs, policies, procedures, and compliance artifacts. - Proficiency using vulnerability and compliance scanning tools such as Nessus, Tenable, or similar technologies. - Strong analytical and problem-solving skills with the ability to identify compliance risks and recommend remediation activities. - Excellent written and verbal communication skills with the ability to prepare professional documentation, reports, and technical deliverables. - Experience creating technical diagrams using Microsoft Visio or similar visualization tools is preferred. - Strong organizational skills with the ability to manage multiple priorities and deadlines within a remote team environment. - Demonstrated attention to detail and commitment to delivering accurate, audit-ready documentation. Requirements - Support Security Assessment & Authorization (SA&A) activities by coordinating and tracking Authorization to Operate (ATO) documentation and authorization packages. - Conduct compliance gap assessments and identify risks across customer cloud and hybrid environments. - Coordinate with engineering and technical teams to validate implementation of technical, operational, and management security controls. - Perform vulnerability and compliance assessments, analyze scan results, and provide recommendations for remediation. - Audit security controls to validate compliance with FedRAMP, NIST RMF, FISMA, DoD IL4/5, and other applicable governance requirements. - Manage and track Plans of Action & Milestones (POA&Ms), including remediation activities, status reporting, and risk reduction efforts. - Support Continuous Monitoring (ConMon) activities by reviewing security documentation, scan results, logs, and system evidence to validate ongoing compliance. - Develop, maintain, and update security documentation including: - System Security Plans (SSPs) - Standard Operating Procedures (SOPs) - Security policies and procedures - Technical implementation documentation - Interview subject matter experts to gather technical and operational information required for compliance documentation. - Coordinate onsite and remote security assessments with internal stakeholders, customers, and external auditors. - Develop compliance metrics, dashboards, and status reporting to measure program effectiveness and identify areas for improvement. - Support proposal development and technical responses to customer requests, ensuring alignment with applicable regulatory requirements. - Produce and maintain technical diagrams and architecture illustrations using Microsoft Visio or similar diagramming tools. - Clearly document client deliverables, ensuring legal, administrative, physical, and technical security controls are accurately represented within the organization's risk management framework. Benefits - This is a full-time position. - Standard business hours are Monday through Friday 8:30 AM to 5:30 PM. - Additional time outside of these hours may be needed to complete the essential functions of the job. Preferred Certifications - CompTIA Security+ - Certified Information Systems Auditor (CISA) - Certified Information Security Manager (CISM) - Other cybersecurity or compliance-related certifications are considered a plus. EEO Statement The Company is an Equal Employment Opportunity (EEO) employer and does not discriminate based on race, color, religion, sex, sexual orientation, national origin, age, marital status, disability, veteran's status, or any other basis protected by applicable discrimination laws.

• Partner with Operations, Legal, and Risk teams to provide second line compliance oversight and guidance for customer complaint management activities. • Monitor complaint program execution against established policies, procedures, and regulatory requirements, identifying opportunities to reduce customer harm and compliance risk. • Analyze complaint data, trends, and emerging risk indicators to identify systemic issues and recommend corrective actions or customer remediation where appropriate. • Develop monitoring routines, reporting, and governance processes that strengthen the maturity and independence of the complaints oversight program. • Provide risk-based guidance on complex regulatory questions involving consumer lending and deposit products while helping stakeholders understand regulatory expectations and business impacts. • Support the evolution of the complaints compliance program by documenting future-state requirements, improving reporting capabilities, and contributing to long-term program enhancements. • Balance tactical knowledge with proven leadership and communication skills to guide conversations amongst stakeholders with differing viewpoints. Drive proposals and conclusions using data and trends to support thoughtful conclusions and influence change.

• Supervising and directing the day-to-day operations of the clinical compliance auditors and specialists. • Serving as the clinical services liaison to senior management and other company leaders and assisting in developing coordinated and efficient companywide team processes. • Assisting with coordinating orientation, training, continuing education, and ongoing performance monitoring for clinical compliance auditors and other departments as required. • Working with Leadership to promote staff members’ continued professional growth and education. • In conjunction with the Compliance Manager, UM Manager, and PHM Manager, overseeing and assisting with developing and managing the agenda and meeting minutes for the monthly utilization management data reported to the Independent Physician Association (IPA) UM Committee. • Assisting with facilitating UM and PHM Plan development and adherence. • Identifying UM and PHM Plan requirements and assisting in creating auditing guidelines to ensure clinical staff continue to meet minimum requirements, including quarterly, semiannual, and annual submission requirements set forth in the UM and PHM Plans. • Serving as a secondary reviewer to ensure adherence to the denial process and all denial compliance audit requirements, reviewing documentation, and ensuring all documentation is submitted in a timely manner. • Supporting the maintenance of confidentiality related to all computer programs, medical records, and other data. • Providing critical-thinking skills, decisive judgment, and the ability to work with minimal supervision. • Ensuring meeting minutes are completed, signed, and uploaded in accordance with UM and PHM Plan requirements. • Assisting with all internal and external audit reviews and submissions. • Completing monthly check-ins with clinical compliance auditors and specialists.