Job Description: Cybersecurity Compliance Expert Position Overview The Cybersecurity Compliance Expert is responsible for supporting the implementation of controls across various regulatory compliance requirements, managing exceptions to cyber policies, monitoring key performance indicators (KPIs) and key risk indicators (KRIs) for cybersecurity, and supporting internal and external audits. This role is critical in ensuring the organization's cybersecurity posture aligns with regulatory standards and best practices. Key Responsibilities 1. Implementation of Controls Support the implementation of controls to meet various regulatory compliance requirements such as NIS-2, China Cybersecurity Law (CSL), and other relevant regulations. Collaborate with cross-functional teams to ensure compliance controls are effectively integrated into business processes. 2. Policy Exception Management Manage exceptions to cybersecurity policies, ensuring that deviations are documented, justified, and approved according to organizational procedures. Conduct regular reviews of policy exceptions to assess risk and recommend mitigation strategies. 3. Monitoring and Reporting Monitor cybersecurity KPIs and KRIs to track the effectiveness of security measures and identify areas for improvement. Prepare and present regular reports on cybersecurity metrics to senior management and stakeholders. 4. Audit Support Provide support for internal and external audits related to cybersecurity compliance. Coordinate with auditors to provide necessary documentation and evidence of compliance. Assist in the remediation of audit findings and implementation of corrective actions. Qualifications Education: Bachelor's degree in Information Security, Computer Science, or a related field. Experience: Minimum of 5 years of experience in cybersecurity compliance, risk management, or a related area. Certifications: Relevant certifications such as CISSP, CISM, or CISA are preferred. Skills: Strong understanding of regulatory compliance requirements (e.g., NIS-2, China CSL). Excellent analytical and problem-solving skills. Ability to manage multiple tasks and projects simultaneously. Effective communication and interpersonal skills. Proficiency in using cybersecurity tools and technologies. Interested candidates can share their updated resume to rolly.martin@thompsonshr.com

About the Role: We are seeking an experienced full stack developer with proven leadership skills, who is keen on taking the challenge of owning an inhouse built HR product throughout its lifecycle. The HR application is built to support the highly customized needs of Regional HR team and the business units. The said developer will work closely with a solution architect and regional HR experts to maintain existing functionalities, analyze new requirements, design & develop the new functions in HR application. Responsibilities: Collaborate with solution architect and HR experts to understand requirements and deliver solutions. Collaborate with data team to design the databases and incorporate the requirements as dictated by HR experts. Design, develop, and implement software solutions using C# and the .NET framework. Write clean, well-structured, and efficient code. Perform unit testing and debugging to ensure code quality. Troubleshoot and resolve technical issues. Stay up-to-date with the latest technologies and industry trends, mostly on Azure tech stack. Contribute to the continuous improvement of our development processes. Ensure the HR app is running as expected in the business hours. Ensure the Azure infrastructure is up to date with latest software requirements to ensure the safety of the data. Act responsibly with the personal identifiable information stored in HR App. Required Skills and Experience: Experience with object-oriented programming and design patterns. C# .NET JavaScript TypeScript React Docker Azure Resource Manager Visual Studio SQL Server Management Studio Knowledge of SQL and database design. Understanding of software development methodologies (Agile, Scrum). Excellent problem-solving and analytical skills. Strong communication and teamwork abilities. Azure App Services Service Bus Function Apps SQL Databases Storage Accounts Application Gateway DNS zones Key vaults Container Instances Container Registries Entra ID Application Insights Virtual networks Web application firewall Frontdoor Technical Governance Azure Devops YAML for Pipelines in Devops Git Interested candidated can share their updated resume to rolly.martin@thompsonshr.com

Role - Market Data Compliance Consultant Location - Remote Contract Position with third party payroll Qualifications required: Market Data content experience (Refinitiv/LSEG, Bloomberg etc.) Experience in compliance activities, preferably in banking environment Technical background (high level understanding of financial applications, connectivity, ability to discuss requirements with developers) DACS experience (managing entitlements) Fast learner; ability to work independently; good communication Job description: Key Responsibilities: 1. Market Data Compliance for New Applications Collaborate with application owners to check and define market data requirements for new applications developed by the client Define market data entitlements in the Refinitiv Data Access Control System (DACS). Ensure that no unauthorized data is used or redistributed in any manner. Manage approximately 500 requests per year related to market data compliance. 2. Review Refinitiv Data Notifications Regularly review Refinitiv Data Notifications regarding content changes, including new or removed data and modifications in various services. Ensure users do not lose access to any utilized data. Verify compliance for new entitlements and assess the impact on users. Confirm that costs are covered for new content. Follow up with vendor management regarding any changes in vendor content. Handle approximately 500-600 requests per year, with a peak at the end of each quarter. Potentially extend responsibilities to include other vendors (e.g., Bloomberg) in the future. 3. Vendor Audit Management Verify data requirements upon the launch of new applications. Conduct regular reviews to monitor changes in data usage and ensure compliance. Adjust entitlements as necessary based on data usage changes. Document processes and findings for audit purposes.