Chayma HADDOU

• Design and implement an overall risk management process for the organization. • Perform Risk assessment (analyze current risks and identify potential risks affecting the company). • Perform Risk evaluation (evaluate the company’s previous handling of risks and compare potential risks with criteria set out by the company. • Establish the level of risks the company is willing to take (risk appetite). • Support business owners to ensure that appropriate policies, procedures, system, and controls are in place to mitigate the unwanted risk. • Create business continuity plan to limit risks. • Conduct policy and compliance audits liaising with internal and external auditors. • Build risk awareness amongst staff by providing support and training within the company.

• Annual LVMH internal control self-assessment – Assessment of controls in place; formalization of controls; definition of any needful action plan along with their timely and accurate follow-up. • Sephora Store Audit. - Administer and implement in KSA, UAE, Kuwait, Bahrain and Qatar. Timely completion of all scheduled store audits, follow-up of eventual action plans and preparation of monthly & quarterly dashboards. • Monthly review of loss prevention KPIs (returns & exchanges, discounts, staff discounts, wholesales transactions, cash & credit cards discrepancies, etc.) Analysis of any non-compliant or suspicious indicators. • Evaluate systems and business processes to identify areas of opportunities to enhance efficiencies and improvements. • Develop, implement, monitor and maintain compliance of internal control policies and procedures across the business. • Leverage on data analysis tools available, schedule and perform substantive testing in the markets to ensure adequate control effectiveness and sustained compliance. • Maintain and enhance the entity guidelines and procedures reference book. • Identify risks not covered at stores and Head Office. Deploy regional, group and international best practices, guidelines, and procedures in KSA, UAE, Kuwait, Bahrain, and Qatar. • Complete and report the annual evaluation of Key Internal Controls and Top Risks within the company. Monitor changes in business, processes and systems and provide guidance and recommendations to internal key stakeholders. • Liaise with the stores to ensure adherence and respect of guidelines and procedures; alert and report any eventual non-compliance or failure observed.

• Set-up a strategy of payment for the suppliers. • Implementation of the KPI to track weaknesses and provide better visibility. • Assessment of the processes and processes improvement. • Pilot the roll out of an ERP system. • Model the cash flows to eliminate non- value-added activities and improvement in terms of cost, quality, and delay. • Reinforce the current partnership with UPS, DHL, FedEx, Aramex and DNATA (calogi) in Dubai. • Negotiating and concluding new partnership in China and Honk-Kong with TNT, UPS, Emirates and Saudi Airlines.

• Organization of partners committees (Internal Customers). • Analysis of the KPI, results and objectives. • Communication with liaison managers and partners of monthly, quarterly and semester results • Animating committees (proposition of solutions and action plans). • Build and maintain a strong relationship with partners (SGCIB, RESG, GBIS, RBDF, DEVL,) • Regular internal customer follow-up and support. • Identify the risks and implement new controls in the process (Integration (referential), procurement and validation of suppliers and invoices). • Perform internal audit work, make reliable the permanent monitoring controls. • Ensure that the managers correctly follow the internal procedures and controls (Level 1). • Updating process relating to units of production and prioritization of control targets. • Perform permanent supervision control for the HUB Team (API, APR, APV). • Achievement of second-level control for the formalization of invoices, access authorizations, the field of taxation (VAT treatment, DAS 2). • Create generic control profiles to ensure the good transfer of the PTP activity • Implementation and deployment of a control tool/application with all the controls of level 1 and 2.

In Charge of Operational Risks: • Identify and evaluate the existing controls and needs and Structure the controls against the internal losses, the major incidents, and the declaration for the sensitive applications of the group. • Ensure the good formalization of the controls, Coordinate and Implement controls, • Industrialize and optimize the processes. • Make reliable and follow up of the permanent monitoring. • Monitor the progress of audit recommendations processing issued by the DCPE (Periodic Control Department) via the IT controls tool. • Participate to the implementation of the internal control system: Collect and report the internal losses, Risk and Control Self-Assessment (RCSA), Key Risk Indicators (KRI). • As member of the crisis unit and as part of the Business continuity plan: scenario analysis, update the BIA (business Impact Analysis), Test the backup sites, ensure the “Good Practices” communication campaign, and run change management. Project Management Officer: • Participate and organize steering committees of international IT projects: • Write the review meetings and present progress report. • Manage and challenge the development teams. • Project Management Support (Business analyst): Define and set up the integration tests and report any inconsistency to the technical teams. • Propose improvements for the application interfaces. • Review of the estimated budget and negotiation.