Hicham KADDARA

Context: Ensure continuous focus on business Risks and establish ‘business as usual’ mindset for Risk Management at all levels (Information Security, Operational Resilience, Physical Security and Health & Safety). Mitigating business risks through a process of consultation and engagement with various stakeholders in Operations, Technology suppliers and Partners. Missions: - Conduct risk identification and quantification in line with group framework - Embed and align Internal Control framework into operational risk management - Perform gap analysis, conduct testing of potential risk areas, Challenge self-assessments and identify reportable issues - Drive, Monitor & Enhance Vendor compliance framework including policy review, contract review, vendor selection review, billing review - Actively participates in the development of Risk and security policies - Periodically provide training and guidance to staffs on Internal Controls (build awareness) - Prepare dashboards/governance by highlighting key issues to Management - Conduct special investigations and Forensics on need basis - Support overall Risk & Control framework

Context: Develop a road map and choice the best approach across systems and processes to ensure team members understand and execute the critical safeguards that protect the data of clients and companies. Missions: - Communicate and embody the culture and mission of the company and team - Managing the scoping, assignment, progress and completion of work assigned to a diversely-experienced and cross-functional set of team resources - Mentoring team members to increase their competency, knowledge, and effectiveness related to the governance, assessment, operations, and execution of Cyber Security, - Providing leadership and guidance for identifying transformation/ improvement recommendations along with structured and credible rationale - Support the documentation and communication of the team’s work and the results - Assist my Line Manager in achieving complete security management systems in accordance with organization plans and adherence to legislation and agreed on regulatory bodies processes and procedures

Context: Protecting stakeholders by securing IT resources and managing cyber-risks Missions: - Analyze the accounts current state and monitor the privileged access level - Pilot and implement actions from the audit project to reduce the security risks - Manage the recertification accounts campaigns - Monitor CyberArk usage and verify compliance with the control process - Manage security requests (Service Now / Silva) - Provide monthly analysis of service level trends - Elaborate the different KPI's and participate in final decisions