Gabriele De Stefano

Société Générale - Global Data Office Department

• Identification and definition of roles and responsibilities,
• Definition of the scope of action (group macro activities, activities, risks covered, entities prioritization and ramp-up plan)
• definition of the interaction model with stakeholders (Group CDO, Pillar CDOs, Business Units CDOs, 2LOD, risks coordinators)

Loxam/GL Events Joint Venture - Paris 2024 Olympic Games (JOP 2024)

Inetum Group - Chief Financial Office (CFO)

Credit Agricole SA - RISK Department & PROCUREMENT Department - Worldwide

• Redesign of the Strategy, the Politics and the Risk Management framework (including risks taxonomy and control plans) on outsourcing activities to include the European Banking Authority Guidelines on outsourcing (2019) as well as Digital Operational Resilience Act (DORA) expectations and clarify the roles and responsibilities of the first and second lines of defense.
• Redesign of several processes including: LOD2 Risk Notices, LOD1 Business Risk Analysis, FAQ on outsourcing, notifications, design of key performance indicators and key risk indicators
• European Central Bank outsourcing Register: Design of an automatic system on Power Query, Power Pivot and VBA to help Procurement Department perform automatic data analysis and remediation campaigns.

BNP Paribas - RISK Function Operational Risk - Worldwide

• Following European Central Bank recommendations related to the improvement of tax risk follow-up on a worldwide perimeter.
• Following an Executive Committee decision regarding the second level of defence reorganization.
• Deliverables: Strategic definition of a POC perimeter, tax risks and processes as-is analysis, production of heatmaps and recommendations regarding first level and second level of defence organization, built the foundations for a target operating deployment model.

BNP Paribas - Data Privacy & Protection (GDPR) - Transversal Functions

• Review of all the Personal Data Processing Activities of the Organization
• Personal Data Processing Activity Target Operating & Organizational model definition including Compliance & Legal functions responsibilities
• Creation of a Data Privacy & Protection website for institutional communication

BNP Paribas - Project Manager - Corporate and Institutional Banking

• Operational Risk Unified System deployment
• Scope: global, 44 countries, 8000 users
• Project Management
• Process monitoring under Aris Risk and Compliance Manager
• Project KPI's automation under VBA and Power Query
• Actively contributed to the optimization of the ORUS teams (BP2S, Global Banking, Solution Coordination, Maintenance) activity both in Paris and India by understanding the client's needs and proposing value added solutions, process and training.
• Created several systems under Power Query to help the ORUS Team and BP2S to ensure the data collection extraction and correction.
• In charge of the communication with ORCORP teams and responsible for the data quality sent to the ORCORP systems ( 30 000 operational risk related controls).
• Created systems in order to generate the control assessment process.
• Coordinated the data enrichment and data entry of more than 10000 operational risk controls with teams in EMEA, AMERICAS and APAC

HARWELL Management - Knowledge Management Program:

• As a member of the Control and Compliance practice, I actively contributed with the creation of pitches and articles related to data and operational risk.