Mbarek Mehdi

- Supporting Financial Services and other industries on several consultancies relative to process optimization, enhancement of procedural framework, tools review, governance, training..etc in the area of Compliance (AML, Anti-corruption, Anti-fraud, KYC, Market Abuse..etc), operational risks (including cyber/IT ones e.g. the ones that might be linked to DORA..) and reputational risks: * Consultancy within BNPPARIBAS (in progress) relative to AI (Artificial Intelligence) Act: streamline of Regulatory Risks valuation approach linked to this directive, coordination with different departments ITG, Legal, GDO..etc, operationalization and acculturation with ITG teams to consider the impacts of this directive in the life-cycle for AI Systems and projects in study/initiation by BNP. Other contributions: - Internal and external Training on several themes (Compliance, operational risks, permanent control..etc) - Accompaiging answers to calls for tenders and advisory on governance issues (e.g. organization of the 3 lines of defense)

- Review and update of AML, ethics & Anti-corruption procedural framework - Enhancement of ethics process and tools (e.g. implementation of new Gifts and meals tool..etc) - Participation to enhance governance (split of tasks between 3 lines of Defense), conflict of interests management (register, cartography, insiders'list..etc) and code of conduct framework - Update and execution of CMP (Compliance Monitoring Plan) relatively to Compliance themes in priority and other themes e.g. accounting, risks, BCP, CSR..etc. - Investigation on ethics, whistleblowing misconduct and conflict of interests matters - Compliance Training support (preparation, customization of training materials and performance follow-up with KPIs) - Review and answer to regulatory requests (Luxembourgish regulator CSSF, ordonnance police judiciaire, OFAC, Japanese regulator..etc)

Several consultancies: - BNPPARIBAS CIB: ➢ Supporting CIB DO in governance and initiatives relatively to KYC/ Third Parties data quality ➢ Liasing with Compliance Group & Compliance CIB to decline regulatory evolutions at the level of DO ➢ Organizing Quality remediation committees to monitor progress status of KYC data quality/labelling - AXA IM : ➢ Supporting Chief of Financial Crime in implementing and reviewing AML &KYC procedures according to French regulatory and FATF requirements ➢ Participating in workshops to enhance AML tools e.g Netreveal especially client risk scoring ➢ Contribution to transversal tasks with AXA Group, central and local teams (UK, Europe, USA, Asia) e.g. us the update of countries risk rating, counterparties monitoring procedure and tool, clients’ screening.. - Harmonie Mutuelle: ➢ Supporting Risk Management Department in enhancing controls environment via a procedure listing control sheets for 1st level operational key controls including non compliance & anti-corruption ➢ Organization, implementation and monitoring of wokshops relatively to controls’ listing for the sake of all business lines and functions of Harmonie Mutuelle in order to build a single repository for key 1st level controls to be compliance with french regulators ACPR and AFA (French Anti-Corruption Agency) - GENERALI France: ➢ Participation in updating third parties integrity asssessment procedure to be compliant with AFA & Generaly integrity standards ➢ Liaising with Compliance and other relevant stakeholders in centralising all third parties (intermediairies, clients, suppliers..etc) in a unique single database for the purpose of parties screening centralisation ➢ Participation in the follow-up of internal and regulators recommendations - BNPPARIBAS CIB: ➢ Liaising with Lines of Defense in order to validate with dedicated owners the agreed adaptations of compliance Group Guidelines within transaction monitoring tool Actimize

- Declination of Compliance Group Roadmap into Milestones specifically to SG Equipment Finance (SGEF) Business Unit - Monitoring of La Fayette action plans and deliverables reported by the 15 entities of SGEF following Group instructions customization including declination of policies and procedures of AML, ABC..etc. o Advisory on the AML/Sanctions & embargoes governance with setting of regular committees o RACI review assistance with Compliance directors and Compliance officers o Assessment of Compliance and AML staffing needs o Accompanying International Compliance teams in Implementing the Sanctions KYC Questionnaire o Liaising on screening of employees and systems including the impact on HR Recruitment process o Liaising on implementation of KRIS and increase of AML Awareness o Anti-Corruption governance o Implementing Gifts, Events and meals Policy o Implementing Whistleblowing instruction o Third parties intermediaries identification, assessment and remediatio o Conflict of Interests and relative annual declaration - Contribution to train Compliance departments of SGEF entities on Anti Corruption and AML themes - Organization of SteerCos to follow up and communicate on program achievements &progress status - Audit trail check: consistency & completeness check of the program certification and deliverables within specific depositories and SG Group Compliance Golen Source (LAFDOC)

- Compliance and Risk assignments:  PMO Compliance Risk Assessment (Financial Crime - Société Générale): o Monitoring of KRIs above all completion rate (via "Communication Chasing" template) and Quality Assurance enhancement progress status o Quality assurance review and coordination with Compass correspondents and Financial Crime experts (versus Compass Questionnaires) and exchange about further action plans o Support Steercos with Compliance: supporting documents preparation & minutes formalization - Development of studies & opportunities : writing articles and Benchmarking on the Operational Risk - Internal researchs: conducting regulatory watch on regulations e.g. MIFID II, clients complaints..etc

- Control the effectiveness of Compliance & Control policies : to draft and decline group control plans particularly for Compliance (e.g. AML, suspect transactions, Major sanctions countries questionnaire, PEP, KYC,ABC, CSR..etc) and to adapt them to IRB environnement with the collaboration of IRB functions and subisdiaries - Advice and alert: To assess and bring expertise on Risk and Compliance Framework and risks cartography to CRO/CCO teams within entities via conference calls or mutual visits including Governance and split of the 3 defense lines - Recommendations’ monitoring: Follow up of IRB recommendations and findings issued by General Inspection, external auditors and regulatory authorities for all functions above all Risk and Compliance and reporting of KRI’s to BNP Group executive committee - Regulatory watch: liaising with concerned department on deployment of Policies/Regulations e.g. FATCA, AEOI, VR, FBL, MIFID II..etc. - Transversal issues: promoting Compliance and Risk Culture and participating in Permanent Control and Internal control committees including Reporting preparation - Tools: Administration of Aurora Tool (recommendations' monitoring tool of BNP Group) and coaching/training of all action plans owners on this tool and submitting of enhancement proposals to the BNP Group central teams

- Reporting process : Analysis of analytical reviews of the financial statements monthly, quarterly,etc.. - Closing monitoring: Follow up of the accounting discrepancies discovered in or out of the Reporting - Deadlines project Monitoring: Oversight of NEWADEL fast close project helping entities to migrate /acellerate the migration to new group tighter deadlines - Internal control monitoring: Follow up of the CFOs certification on the internal control tool - Folllow up and synthesis of Internal control recommendations issued by external and internal auditors through KPIs/KRIs - Transversal tasks: coordination with Group Finance on the intra-group discrepancies, reconciliation of accounting data with other (departments) data e.g. ALM, Management Control,..etc.

Closing: monthly reporting thanks to Magnitude Pack Gap analysis: forecasts VS real figures regarding 20 units in the world, the activities and the P&L items and analysis of other operational indicators

Audit and accounting/tax review of small and medium-sized firms in the services sector: - Audit: understanding of business process, analytical reviews, procedures and substantial tests, internal controls and audit conclusion and reporting according to the ISA’s standards (ISA 100 to 999) - Financial Reporting: translation of local financial and accountant data in the IAS/IFRS standards for the holding needs