• Design and/or enhance corrective action process • Assess and prioritize corrective action referrals • Initiate corrective actions (e.g., corrective action plans, warning letters) • Collaborate with business stakeholders to perform root cause analysis • Collaborate with business stakeholders to identify prevention, detection, and correction opportunities • Ensure business partners complete corrective actions in a timely and effective manner • Identify ways to mitigate risks to our organization • Develop job aids, playbook, and other program documentation • Build and maintain positive and strategic relationships with internal and external stakeholders • Support our compliant and ethical culture • Assist in developing or updating oversight materials and reporting metrics • Create and distribute written compliance standards where applicable • Abide by organization retention standards and version controls • Collaborate in Compliance training and education needs • Investigate potential or reported issues of non-compliance • Monitor organizational disciplinary actions and incentives for consistency, accuracy, and timeliness • Collaborate with Legal and other stakeholders to interpret regulations • Other responsibilities as assigned

• Serve as the designated Oficial de Cumplimiento before the UAF, acting as the primary point of contact for regulatory engagement, inspections, and reporting. • Build out and continuously strengthen local compliance operations, establishing an effective compliance framework aligned with Taptap Send Group’s standards. • Ensure compliance with all applicable Chilean laws and regulations, including Ley N° 19.913 (as amended by Ley N° 20.818), UAF Circular N° 62 (Instrucciones de Carácter General for sujetos obligados), Banco Central de Chile’s Compendio de Normas de Cambios Internacionales, and Ley N° 21.234 (Ley de Fraudes). • Manage and coordinate regulatory reporting to the UAF, including Reportes de Operaciones Sospechosas (ROS) and Reportes de Operaciones en Efectivo (ROE), ensuring timely and accurate submissions and proactive communication of material changes. • Develop, maintain, and update policies and procedures — including the Manual de Prevención de Lavado de Activos y Financiamiento del Terrorismo (LA/FT) — tailored to Chilean operations. • Conduct compliance testing and monitoring, ensuring prompt remediation of identified issues. • Prepare internal compliance reports for management and the board. • Report suspicious transactions to the Unidad de Análisis Financiero (UAF), in accordance with legal requirements. • Oversee CDD/KYC/EDD on new customers, partners, and products, including PEP screening per UAF Circular N° 62. • Collaborate with Group Compliance and internal audit teams to strengthen controls and ensure consistency with global standards.

• Develop, review and embed policies; • Monitor adherence through audits and training; • Provide expert guidance on regulatory requirements; • Promote a strong culture of compliance across Smartest Energy UK; • Collaborate with teams across the business and external stakeholders; • Oversee mandatory compliance training; • Support fraud management and investigations; • Contribute to regulatory reporting and audits.

• Own the full evidence collection lifecycle across all active audit and continuous compliance cycles. Coordinate with control owners to gather, validate, and organize evidence artifacts in the GRC platform (Drata or equivalent). Use AI-assisted workflows to pre-stage evidence, flag stale artifacts, and reduce the manual burden on engineering and IT teams—making it easier for control owners to do this right than to skip it. • Serve as the primary operational point of contact for external auditors during Stage 1, Stage 2, and surveillance audits. Manage auditor portals, respond to RFIs, track open items to closure, and ensure auditors leave each engagement with a complete, accurate view of how AlphaSense's controls operate in practice. Findings get closed before they become repeat findings. • Perform ongoing monitoring and periodic testing of implemented controls. Document control effectiveness, identify gaps, and work with control owners to remediate deficiencies on defined timelines. Map findings to applicable framework requirements across SOC 2, ISO 27001, and ISO 42001. Contribute to transitioning point-in-time control testing toward continuous, automated validation. • Maintain and update security policies, standards, and procedures to keep them aligned with current operational reality and framework requirements. Ensure documentation is version-controlled, accessible, and demonstrably distributed and attested to—satisfying auditor requirements without relying on static PDFs or manual tracking. • Identify and implement opportunities to use AI tools to streamline evidence gathering, control narrative drafting, audit preparation, and gap analysis. Operate in a human-in-the-loop model: AI accelerates the work, you validate for accuracy, completeness, and confidentiality before anything ships. Actively share what works with the broader GRC team. • Support compliance efforts related to AI regulations and standards including EU AI Act, ISO 42001, and NIST AI RMF. Assist with risk assessments, documentation, and audit evidence for AI governance controls. Collaborate with Engineering and Product to ensure secure and responsible use of generative AI tools across the organization. • Partner with Engineering, IT, Legal, and Product to ensure control ownership is clear, evidence is readily available, and compliance requirements are embedded into operational processes—not bolted on at audit time. Provide risk and control guidance on post-implementation reviews and remediation activities. Help stakeholders interpret requirements and build controls into how they actually work.