Thomas Mahon

• First Line of Defence (FLOD) Partner in the Center of Excellence (FLOD COE) responsible for the day-to-day management of Issue and Incident governance for designated Functional Areas. • Supports the business unit in identifying/reporting material control deficiencies and assessment of the effect on organizational objectives, ensuring risk owners have appropriate mitigation strategies that holistically address root causality, and collaborating with the business to achieve a competitive advantage through support of business unit initiatives. • Collaborates with the 1st, 2nd, and 3rd lines of defence to manage risks within various functional areas based upon guidance from management. • Facilitate the risk governance processes to ensure risks are well known and intentional decisions are made on how much risk will be taken.

• Supporting the creation and ongoing management of PayPal's Global Legal Inventory, which is a comprehensive list of laws and regulations identified as applicable to the products and legal entities at PayPal • Completing inherent risk assessments on the compliance risk posed by products, services and legal entities in the absence of a control environment • Monitoring regulatory changes that may impact PayPal through alert monitoring and through cross-functional engagements with Legal and Government Relations teams • Working with senior leaders and relevant stakeholders to assess the regulatory impact of mergers and acquisitions, product launches and licensing initiatives to ensure the GLI is updated to reflect these developments • Engaging with external consultants to ensure PayPal is provided with relevant, high-quality information • Creating and developing guidelines, procedures, and framework documents for the Compliance program • Establishing tracking and reporting systems for the Global Legal Inventory team

• Acting as PayPal’s regional Operational Risk Analyst responsible for implementing PayPal’s Global Operational Risk Framework across EMEA Operations • Identifying risks through workflow analysis and collaborating with higher management, ensuring risks are documented appropriately • Evaluating risks as they are identified to determine both the inherent and residual risk ratings as well as evaluating risks periodically to ensure continued alignment with approved risk appetite and tolerance • Ensuring appropriate risk response strategies are in place to ensure risks are mitigated or reduced to an appropriate level • Assisting in the monitoring and testing of controls in place as well as acting as a consultant for testing initiatives • Managing issues and incidents as they are identified to ensure they are remediated appropriately according to approved standards • Acting as facilitator for Audit during their fieldwork and planning phases as well as ensuring that deliverables are met for any Audit findings • Supporting Authentication and Resiliency initiatives in the EMEA region

Scope of current role includes: • Contract management - design and implement contract management system • Contract reviews to ensure regulatory requirements are met (Master Service Agreements, Service Level Agreements, Statements of Work, etc.) • Materiality assessments of external service providers/vendors in Risk, Payments, Collections, Customer Solutions and Technology functions • Assisting in SLA Reporting for APAC and EMEA regions • Developing and implementing business processes

• Responsible for ensuring customers are in compliance with the Compliance Policy as defined in PayPal’s terms of Use • Responsible for ensuring that PayPal implements the appropriate controls and monitoring to satisfy its obligations to the regulatory authorities • Responsible for ensuring that Anti Money Laundering and Counter Terrorism Financing regulations are adhered to and accounts are monitored appropriately • Assist the leadership team to monitor and implement procedures that address policy modification

• This prestigious internship is awarded to one student each year and I was chosen by NUIG after a competitive application process. • During my time as an Intern in the Prosecution Policy Unit, I was assigned responsibility to complete key documents for the Department and coordinate research on certain projects.

LLM Dissertation: ‘The Dangers of Blocking Systems in the Regulation of Illegal Content Online’, National University of Ireland, August 2012. Selection of Academic Conference Papers Presented During the LLM: ♦ “Rethinking Previous Convictions at Sentencing”, Law Student Colloquium “Rethinking the Law”: Trinity College Dublin, 19th February 2011. ♦ “The Regulation of Cyberhate: A Threat to Fundamental Freedoms”, CCJHR Postgraduate Conference: University College Cork, 26th April 2012. Travel and Funding: I was the recipient of funding to attend a two-day conference in University College London on “Law and Language” in July 2011. This was awarded based on academic merit and relevance to current studies.