Nooriah Kirsten

Skills: Banking

• Led compliance efforts for 4 CASP licenses and applications for AD, Mutual Banking License, and ADLA, ensuring regulatory alignment. • Maintained expertise in legislation such as Collective Investment Schemes Control Act, Pension Funds Act, and Financial Markets Act for investment eligibility. • Oversaw portfolio compliance, advised on investment eligibility, and resolved queries on Forex transactions.

• Develop the functional BU strategy aligned to group strategy, • Ensure strategy and goals are cascaded to the team • Demonstrate innovative thinking in area of expertise and translate this into business process/ solutions/ working practice improvements • Develop and maintain the HomeChoice regulatory universe. • Develop, maintain and revise appropriate Compliance Plans and related policies and procedures, and provide assistance and training on applicable legislation, codes, policies and any other compliance related issues • Conduct compliance monitoring to verify compliance with applicable laws, regulations, contractual obligations, policies, procedures and standards, and in particular: • SARB commitments • PASA guidelines BIS FMI principles • Regulatory changes • NCA Monitoring • Perform independent reviews to ensure that compliance issues are appropriately investigated and resolved. • Ensure proper identification and reporting of violations or potential violations and recommend action plans for resolution of issues and provide general guidance. • Ensure the effective collaboration and integration with the internal audit, enterprise risk management, and information security and governance functions. • Develop and maintain data lifecycle framework for HomeChoice. • Provide legal and compliance advice in relation to POPI, PAIA and related legislation. Ensure that policies, procedures, agreements, and practices comply with commercial, intellectual property (IP), privacy, data protection and competition laws as well as all other statutory requirements. • Implementation of processes and controls to record and monitor requests for access to information, collection and safe storage of personal information in compliance with the Promotion of Access to Information Act 2 of 2000 (PAIA) and Protection of Personal Information Act 4 of 2013 (POPI).

Support the business in maintaining compliance to all standards, regulatory and legal requirements. Support the activities in maintaining the information security management system framework ISO 27001 and all other standards Maintain regulatory compliance to all applicable regulation across South Africa, the UK and any other applicable territories Review of compliance documentation for internal and external stakeholders Support the completion of due diligence requests Maintain the risk management process Maintain incident management process Maintain registers for compliance activities: training, audits, documentation Create applicable procedures, policies and documentation as required Training Conduct research on applicable regulation Any other initiatives to achieve Compliance deliverables Enterprise Risk Management Risk incident reporting, development of procedures and implementation thereof Risk Management Frameworks for various ISO standards that our business is certified against POPIA GDPR UK Data and Privacy Act 2018 Information Security Data breach identification and reporting Regulatory Compliance both (UK and SA)

Design and implement new standards, policies and procedures for compliance and risk management AML Section 43 Compliance Officer Ensuring AML/FIC Procedures and policies are aligned with the relevant national and international legislations.Development and Implementation of the Group FIC Risk Management and Compliance Programme as well as the development of the Risk Based Approach Reporting to the Board and Executive Committee on the Risks in our Business, coupled with proposed Remediation for risks The monitoring of various compliance requirements set out in FAIS, FICA, CISCA , LTIA, PFA, POPIA, GDPR, Cyber Security Act, FSRA, Insurance Act. Development of the Regulatory Universe Develop Compliance Risk Management Plans in accordance with Generally Accepted Compliance Practice Facilitate the implementation of controls documented in CRMP's. Present a compliance monitoring plan to management and governance stakeholders for approval Monitor compliance with applicable regulatory requirements relevant to the organisation and its products and / or services Define compliance stakeholder roles and responsibilities in business, relating to compliance monitoring Provide compliance guidance, advice and services to compliance stakeholders Determine the governance requirements relating to compliance reporting Determine the compliance reporting requirements to stakeholders and regulators / supervisors in terms of regulatory and/or organisation requirements Coordinate communication channels and liaison with regulators and supervisors Assist in the design, development and delivery of compliance awareness and training. Appointed FATCA and CRS Responsible Person Appointed Popi Information Officer Sponsor Trustee on Fedgroup’s 9 Retirement Funds Claims, Death Claims, Admin and Beneficiary Care Sub- Committee permanent member Member of ASISA Systemic Risk Board Member of Compliance Institute of South Africa

Answering SARS queries pertaining to Legislative matters Drafting of Legal opinions with regards to changes in both Tax and Pension Fund’s Legislation Advising as to whether funds are administered and are following both business rules and legislation Liaising with Client Services Adviser’s on various queries raised as to legislative requirements and regulations Oversaw the Compliance issues surrounding Section 14 Transfers into and out of Funds

Submitting of Fund Rules to both SARS Answering SARS queries pertaining to Legislative matters Drafting of Legal opinions with regards to changes in both Tax and Pension Fund’s Legislation Advising as to whether funds are administered and are following both business rules and legislation Liaising with Client Services Adviser’s on various queries raised as to legislative requirements and regulations