Charles Rosemond

Supporting the Operational Risk team in DORA compliance rollout Mapping critical functions, assets, contracts, and third-party dependencies Establishing the incident management and ICT asset inventory process Review of Security Policies and procedures Implementing the information register and gap analysis

Driving DORA compliance implementation across BIL Group entities (Investment Management, Reinsurance, etc.) Defining critical functions, ICT asset inventory, and BIA analysis Revising contractual frameworks and vendor criticality mapping Drafting and aligning security and incident management policies Leading governance, budget monitoring, and KPI/KRI reporting for risk committees

As a Director at Julhiet Sterwen, I supported leading financial institutions in their transformation and regulatory compliance programs (DORA, GDPR, AML, MiFID, MAR/MAD). I led complex end-to-end projects, from strategic framing to operational delivery, ensuring governance, budget oversight, and risk management. I advised executive committees (C-level) on target operating models, cybersecurity, and risk frameworks to strengthen organizational resilience. Within the Boost and FIRCO communities, I coordinated teams driving ICT and operational compliance initiatives. I also managed and developed consulting teams, fostering collaboration, excellence, and agility to meet evolving market demands. My leadership focused on long-term value creation, strategic vision, and client partnership, ensuring measurable and sustainable impact.

Led the DORA compliance program for 16 European entities (internal ICT provider) Defined governance structure, steering committees, and communication packs Coordinated TPRM, ICT Risk Framework, and Incident Management streams Defined compliance evidence and program dependencies across AXA Group

Oversaw ORM transformation under the global cloud migration program “Luigi” (64 entities) Defined the target operating model and governance (SteerCo, OpCo) Conducted impact assessments and updated control frameworks Coordinated risk, compliance, audit, and cybersecurity stakeholders

Led the Legal & Security stream within a major IT relocation & outsourcing project Managed data protection compliance across multiple jurisdictions (Bafin, CSSF, Finma…) Drafted and negotiated IT contracts, SLAs, and governance plans Oversaw DPIA, PDPQ, and RCSA risk analysis; supported data anonymization strategy

Au sein du cabinet Redsen Consulting, Acteur majeur dans le conseil helvétique, je déploie mon expertise pour un grand acteur de la banque Privée dans le cadre d'un projet de transformation digital. Notamment sur les sujets suivants : - CIO advisory - Adéquation du secret bancaire et Protection des données ( pour plusieurs pays, RGPD : Chap IV -Sec 2 , Chap V, ..., Secret Bancaire, LPD, DIFC, Bafin, ... ) - Déclaration auprès des régulateurs locaux pour 7 pays - Evaluation des risques projet - Réalisation des SLA - Cross Border Outsourcing - Suivi de la mise en oeuvre des mesures de sécurisation du SI

Designed a global case management tool for Compliance (AML, Sanctions, PEPs) Defined functional and technical architecture; coordinated RFP (PEGA/Appian/IBM) Supervised legacy system migration and data modeling Maintained and evolved the “STAR” application for suspicious activity reporting

Deployed sanctions screening solution across CACIB entities Defined project scope, business requirements, and deployment methodology Conducted user training and change management

Managed MAD project (Actimize ETS platform) and AML remediation Delivered functional specifications, data mapping, and governance setup Built SharePoint compliance portals and KPI dashboards