Chloé LE MARHOLLEC

– Owned end-to-end the design and delivery of a gap analysis between the EU AI Act and Group AI policy, building the resulting local compliance framework from scratch: – Identified material regulatory gaps between EU AI Act obligations and emerging APAC/Australian AI governance regimes, and translated them into a set of local controls. – Delivered a binding local addendum with an implementation plan, assigned control owners, and tracked timelines, producing auditable, regulator-facing compliance documentation. – Owned training content on the internal AI system (MAIA), covering approved use cases and non-compliance risk prevention. – Owned the end-to-end NAPL Compliance RCSA, assessing gross and residual risk across Business lines driving mitigation actions to closure, and reporting outcomes to senior management. – Presented cross-jurisdictional compliance risk analysis to the APAC Compliance Board (CEO APAC and regional senior leadership), driving coordinated regional remediation, direct experience translating compliance program status and material risks for a senior governance body. – Managed two compliance incidents end-to-end, completing root cause analysis, risk assessment, compensating controls, and senior-management escalation within required timeframes. – AML/CFT gap analysis: scoped external consultant assessment, drafted local addenda with implementation plan. – Weekly hot topics report for the CEO on regulatory developments (AI, data, and cyber governance) – Owned and managed the full local controls framework: PAD reconciliations, SLA audits, KYC updates etc. – Automated one outsourcing workflow plus two recurring controls, reducing review cycle times. – Compliance advice on deals across mining, technology, renewable energy, and telecoms (1+/week), with documented justification for local approval. – Delivered compliance inductions for 9 new hires; monitored e-learning completion and follow-through.

– Designed Bolloré SE's multi-jurisdictional compliance audit matrix from zero (EU, US, UK regulations), grounded in Sapin II, GDPR, Sanctions, RSE, and ensuring audit and regulatory inspection readiness across all covered jurisdictions. – Ran 9 audit engagements (Australia, Chile, Thailand, China, Switzerland, France; 2 weeks each): Presented findings directly to CEOs and CFOs at every engagement: structured kick-off and closing sessions with C-suite audiences across 6 countries. – Coordinated Bolloré SE's formal regulatory response to the French Anti-Corruption Agency (AFA) following a CJIP settlement: gathering cross-business-line evidence, drafting submissions, and maintaining full traceability against regulator deadlines.

– Designed La Poste Groupe's M&A compliance program end-to-end where no prior framework existed: due diligence grids, pre-acquisition questionnaires, and post-closing controls; achieving 100% recommendation implementation across 16 acquisitions and authoring the Group-wide policy. – Assessed compliance postures of tech, data, fintech, and healthcare digitization companies as acquisition targets, including GDPR accountability structures, algorithmic processing disclosures, and AI-adjacent data governance risks. – Co-designed the Group sanctions risk mapping methodology and the International Sanctions & Embargo policy (SIE); ran workshops with exposed business lines (including export controls teams) in the context of Russia-Ukraine sanctions escalation (2022). – Enhanced regulatory monitoring.

– Managed trade compliance controls (EU/US/UK export regulations); delivered three training sessions for Country General Managers across multiple jurisdictions. – KYC/KYS due diligence on third-party relationships. – Sanctions screening, incident management; contributed to BP audit and drove implementation of post-audit recommendations.

– Legal research, analysis, drafting of corporate documentation and contracts for corporate transactions.