Samia H.

- Directed the evaluation and reinforcement of the internal control system across regulated entities, applying the COSO framework to elevate compliance, governance, and operational resilience. - Led and steered ISAE audits, including the strategic rollout of a dedicated IT control framework. - Designed and mandated a new operational testing framework covering ESG, AML, and annual accounts (Group and AIFM), ensuring consistent and reliable control execution. - Took ownership of a renewed governance structure for processes and procedures, enhancing accountability and decision-making transparency. - Redesigned the incident management process, migrating from a manual wordform setup to a structured SureCloud solution. - Developed a new taxonomy and governance model, introducing standardized incident categories, escalation paths, and root cause analysis to enhance transparency, remediation tracking, and continuous control improvement. - Drove and prioritized COSO-based assessments in critical departments, units, making key decisions on remediation and resource allocation. - Aligned and influenced internal practices with industry benchmarks, strengthening risk management, governance, and executive decision-making structures. - Led the redesign of the Business Impact Analysis (BIA) framework and template to align with DORA, engaging cross-functional teams to identify key business processes, dependencies, and resilience priorities. - Standardized the BIA process across regulated entities, reinforcing business continuity planning and operational resilience.

- Review and challenge execution of operational controls performed by the 1st Line of Defense: comprehensive identification of inherent risks, description of key controls (including their effectiveness), proposal of action plans or risk acceptance statements - Independent audit with Big 4 Luxembourg for ISAE 3402 type I and II– Including assessment on effectiveness controls, write audit findings - Implementation of control monitoring plan on key business operational processes Fund services, Corporate Services, Private Equity (PowerBI) - Monitor the Internal audit status and follow-up on recommendations actions with operations teams - Review, write and design processes with Business teams - Coordinate Business continuity plan with Management (including testing, BIA) - Assist Group projects (Transaction monitoring, Risk Assessment, KYC)

Project Management: - Assistance in the process of re-organization and change management in the context of the implementation of a new core banking system, Implement Compliance process : Account opening, control MiFid, - Identification and analysis of gaps, - Design organizational process (via Mega software), - Realize training tool kit using banking software and the internal process. Business strategy: - Provide selection support for clients or prospects (Research of specific profiles), - Conduct the marketing campaign for KPMG Public Sector, - Assess and optimize the operational organization of front-, middle- and back office activities.

- Direct liaison with the operational and commercial departments and BPERE’s Custodians in order to resolve any urgent or important matters, - Study and validation of contracts in collaboration with Legal and Operational Departments (KYC, AML), - Study and implementation of new means of communication with some of BPERE’s Custodians, - Study of markets and operational risks inherent in the opening of accounts in emerging countries, - Treatment and analysis of “Proposal Request”, - Reception and targeted diffusion of market information concerning “Custody and Clearing”, - Identify and keep an inventory available to all staff of essential laws and regulation pertinent - Communication with relevant external bodies and regulators on compliance matters establishing and/or supervising appropriate compliance checks and controls.