Hassan Zaitoun

As the leader of the ERM team, my primary focus is to inspire and guide the team toward effectively implementing the ERM framework. My role is to support the Enterprise (ENEC, Nawah, and BOC) business plan, projects, operational readiness, and operations, and facilitate informed decision-making. Additionally, I prioritize meeting the requirements of WANO SOER 2015-2 on risk management challenges and ISO 31000 guidelines. Also, increasing business resilience through risk horizon scanning, external threat assessments, managing interconnected risks, and digitizing risk management processes. Furthermore, I am responsible for monitoring and reporting on the effectiveness of the risk management framework, governance, and maturity to senior management and the Risk Committee. More specifically:

· Craft a robust risk appetite and tolerance statements and translate them into scalable impact category levels.

· Conduct quantitative and qualitative risk analysis.

· Enhanced risk management escalation and reporting structure from the operational level to the Enterprise level and automate the reports through the risk software (ARM) to support executive decision-making.

· Develop and implement the Risk Management Maturity Model to address at-risk behaviors.

· Develop and conduct risk management capability-building and awareness sessions through instructor-led and online training certified IRM (in-house) training, mentoring, and coaching.

· Implement a risk champion program and monitored.

· Developed and implemented key risk indicators (KRIs).

• I was responsible for leading the risk management team by managing the implementation and monitoring of the ERM process across the organization.
• To facilitate effective risk management, I held regular risk workshops and generated comprehensive reports for various levels of the organization, providing stakeholders with a clear understanding of the organization's risk exposure and risk mitigation strategies.
• I proactively embedded the risk management process within key business areas, developing policies and procedures to ensure a risk-aware culture permeated the organization.
• Implementation of ERM software and training, and successfully meeting ISO 31000 requirements and achieved compliance award over 3 consecutive years.
• Developed a Data Disaster Recovery Plan with the IT Department and conducted a Business Continuity Gap Analysis and crafted implementation strategies to enable the set-up of a corporate business continuity management program.

• Assisted in rolling out a corporate risk management framework, conducted risk assessments, and reported to senior management.
• Developed and updated corporate policies and procedures and kept up to date with CMA regulations and requirements.
• Contributed towards a definition of the company’s (and its subsidiaries’) risk management philosophy by improving business processes and implementing a comprehensive structure of policies and procedures, which protected the company’s assets. This was accomplished through the management of risks within the company’s risk appetite and tolerance levels, and adherence to compliance regulations. This also included assessment of key risks involved in joint venture business relationships and recommended mitigation plans.

As part of my responsibilities, I conducted operational risk assessments, risk-based audits, compliance testing of operational controls, and reporting to clients (financial services) in line with Basel II regulatory requirements. These efforts resulted in accurate reporting to our clients in the financial services sector, providing them with the critical insights they needed to make informed business decisions.

• I effectively executed back-office operational asset management duties. This included managing portfolio configurations, payments, schedules, and reporting on performance of the more than $200 million dollar US portfolio, and follow-ups (fees, security transactions, cash flows).
• Performed trade executions and reporting with the custodian bank.
• Processed KYC applications and opening of accounts.
• Assisted in the design, testing, and implementation of new controls, which enhanced the company’s management information systems.