Amer Saeed ⭕

Leveraging 20+ years of top tier experience, leading Corporate Data Governance and Compliance in line with SDAIA and NDMO Data Standards, Policies and industry best practice. Driving compliance with Saudi PDPL privacy requirements including Ethical and Responsible AI Governance. Supporting data value realization and greater achievement of business goals through data, digital transformation and AI. Supporting the 2030 Vision and tremendous growth of the Kingdom.

Led Privacy and Security Compliance program and team covering GDPR Privacy and security controls compliance assessment, risk mgmt and controls remediation for high risk applications processing PII.

Co-Founder of Management Consultancy that provided Data Strategy & Governance, Transformation, Data Privacy and Information Security Consulting and Management Services.

Managed Data Risks and Controls as part of Cloud Data Controls Framework. Particular emphasis on data residency and localisation controls.

As a key client engagement for Datamise Ltd, Data Quality Management advisory and support for Chief Data Office.

Led the data governance programme within Global Compliance function, ensuring Compliance Financial Crime models adhere to the HSBC Data Management Framework and controls (Critical Data Elements Identified and defined in business glossary (Collibra), Data Quality Management, Trusted Source Verification and Data Usage/Lineage/Flow).

As a key client engagement for Datamise Ltd, supported and advised on the initial development of the internal enterprise wide data strategy and data governance framework.

As a key client engagement for Datamise Ltd, led an internal CIO sponsored identity and access management (IAM) programme and team, focussing on identity governance and user access controls (inc privileged users), with the overall aim of strengthening compliance with the GDPR / UK DPA 2018, internal Information Security Policy and maintaining ISO27001 and Cyber Essentials Plus certifications. Rollout of key market leading IAM technologies e.g. CyberArk and SailPoint (RFP, PoC, Discovery, Design, Test, Implementation). Developmemt of firm wide IAM strategy and multi year maturity and remediation roadmap to improve information security posture (approx £6M budget)

As a key client engagement for Datamise Ltd, led the internal GDPR compliance programme for KPMG UK to ensure an adequate level of compliance by the May-18 GDPR enforcement date. Initiatied this programme from scratch, building a core team of seven staff (PMs, SMEs and BAs) together with roadmap, plans, budget, reporting and compliance artefacts and matrices. I reported progress of this very high profile programme directly to board level senior managing partners and the UK executive board in person. Post-25th May, led a portfolio of GDPR compliance phase 2.0 projects across data privacy and information security risk management, data deletion, unstructured data cleanup, supplier assurance, identity and user access mgmt (inc privilged users) and establishment of a robust Data Privacy Office, to continue the journey of further strengthening data privacy and protection compliance for the UK firm. I continued to lead this until transition into respective BAU functions.

As a key client engagement for Datamise Ltd, led the bank's global GDPR compliance programme. Initated the global programme end of 2017 and built a core team of approx 15 staff (PMs, Privacy SMEs and BAs) together with governance, budget, plans, reporting and roadmap. Reporting to EMEA Head of Data Governance and reporting GDPR programme progress to Executive VPs. Worked with business areas and corporate functions in all key areas of GDPR compliance, taking a risk based approach. Liasing with Privacy Office, Legal, IT, Data Governance, Compliance and Audit. Areas covered included: Internal / External Comms (inc client queries) & Training Business process / product reviews Gap Analysis and Impact Assessments Client and Vendor Contracts Intergroup Agreements Privacy Office Operating Model Corporate Policies (Global Privacy Policy) PIAs/DPIAs/Privacy by Design Data Incident Mgmt / Breach Reporting Privacy Notices Article 30 Register of processing DPO Appointment IT remediation (inc user access mgmt and encryption) Unstructured data protection approach Deletion and Retention Approach DSARs assessment / procedures Data Classification Data flow mapping First Line Controls and Procedures

As a key client engagement for Datamise Ltd, managed and led the Global Sanctions Name Data Readiness (SNDR) programme for HSBC Global Commercial Banking. This involved the management and co-ordination of global enhancement of customer and connected party data for all commercial banking customers across 56 countries and five regions, with the aim of improving accuracy and efficiency of sanctions screening, mitigating HSBC's exposure to sanctions risk. The role involved managing all aspects of design, planning, implementation, budgeting and resourcing, through to transition into sustainable BAU. Effective co-ordination with regional leads / country leads across five regions has been central to this role. Primary focus has been the utilisation of third party data vendor sources to enrich data e.g. Bureau Van Dijk (BVD), Dun & Bradstreet and Avox. This sanctions data change programme sat within the wider Data Readiness and Global Standards highly visible HSBC programmes. It was an essential programme required to meet HSBC Monitor and DPA commitments. Working closely with CDO teams, to build a strategic solution for monitoring sanctions data quality (DQ dashboards / heatmaps / MI), providing assurance and aligning with newly introduced HSBC Data Governance policies.

As a key client engagement for Datamise Ltd, managed the Group Data Programme for HSBC Global Asset Management (AMG). Directly contracted by the Chief Data Officer (CDO), acted as the conduit between HSBC AMG and the Group Chief Data Office, representing AMG in all relevant working groups and forums. Working with a business analyst resource, managed the performance of data governance / data strategy self-assessments, GAP analysis and constructed a plan / roadmap to achieve compliance against the Group data management FIM policy. Managed the creation of target operating models and processes for the management, data quality remediation and assurance of critical data points. Presented the data strategy and implementation plan across AMG senior management and business areas, including multiple regional COOs and Global Heads. Rollout included the implementation of group tools such as Collibra for business metadata management, RTC DQIM for data quality issues management and Big Data Hadoop technology for data analytics and DQ MI.

Project Manager (Vice-President) within Deutsche Bank’s Group Technology Operations (GTO) CB&S function, managing the Trade Data Standards Compliance programme working closely with the Chief Data Office (CDO). Developing trade logical data models, data dictionaries, Data Standards/rules for Trade Data using industry standards like Fpml, fixML and product ref data rules. Also build compliance level checks / assessment process against these Data Standards (utilising Hadoop, Lavastorm and Qlikview technologies) and manage data remediation/RCA of trade data exceptions. The overall aim was to build a Trade Data Treaty between the CDO and Data owners (data ownership being core) whilst implementing the new concept of data stewardship within the organisation and improving trade Straight Through Processing.

HSBC Investment Bank Global Banking & Markets - Operating as Deputy to Global Head of Data Quality and CDO EMEA - Project / Programme Management of Data Quality / Change Projects (RTB and CTB) - Line managing team of PMs, BAs & DAs (8 direct staff) - Entity / Client Reference Data cleansing - Data Quality Remediation - Legal Entity Structure / Hierarchy correction - Credit Structure / Hierarchy correction - Establishing and integrating Client Global unique identifier - Managing projects impacted by Dodd Frank (DFA) LEI integration / Trade reporting (CICI/LEI) - Managing projects impacted by FATCA / EMIR - De-duplication / enrichment of Customer data - Customer MI reporting and data quality exception management - External Vendor data integration / enrichment (AVOX, BvD Orbis, Dunn & Bradstreet, Lipper, Markit) - Alignment of MDM to global client data systems (inc KYC / Docs) - Implementation of Data Governance / Standardisation - Implementation of Data Quality Framework / Policies / Good practice