Maha Damou

Development and Implementation of Internal Control Processes:

• Design, develop, and implement internal control procedures adapted to the specific activities of support functions and the retail network.

• Strengthen compliance with industry and Group standards.

Identification and Assessment of Operational and Strategic Project Risks:

• Collaborate with various teams to assess the financial, operational, and reputational impact of risks identified within structuring projects (Second Hand, Rental, Marketplace, etc.).

• Proactively identify operational risks related to Retail and develop preventive solutions.

Design and Management of Fraud Prevention Programs:

• Develop proactive strategies for fraud detection and prevention.

• Collaborate with IT teams to implement advanced monitoring tools by creating a Fraud and Loss Prevention Dashboard.

• Define key performance indicators to evaluate the effectiveness of internal control, risk management, and fraud detection initiatives.

Report Development and Communication:

• Prepare periodic reports on customer/store data analysis for the Management Committee and relevant stakeholders.

• Communicate transparently with management, providing recommendations to improve risk management.

Training, Awareness, and Support:

• Systematic support in all group strategic projects.

• Organize training sessions for employees to enhance understanding of internal policies, control procedures, and anti-fraud practices.

• Raise awareness among all staff about risks and best prevention practices.

• Cooperate with internal and external auditors to facilitate annual audits and ensure good compliance with industry standards.

▪ Perform regular audits on 6 financial applications: HFM (consolidation), REP (reporting), FRS (Consolidation), ePMR (Projects Management), Diapason (Treasury), PowerPlan (Lease calculation)

▪ Train and perform follow ups with the Finance-Hub Team (2 to 4 people) on the SOX controls applicable for the applications they administrate, monitor their work, and make sure controls are done timely and correctly.

▪ Implement a new tool, HARP Portal, to automatize and secure the quarterly User Access Review for 4 different applications.

▪ Communicate and provide testing evidences and explanations to the Internal Controls Department and to External Audit teams during Applications’ Process Walkthroughs, Interim Audit and Update Audit testing throughout the year.

▪ Alert and recommend on SOX risks for ongoing and upcoming IT projects.

▪ Shadow the cloning of different application during the Split operations between TechnipFMC and Technip Energies in order to make sure the process respects SOX requirements and recommendations, especially the securities migration process before and after the Go Live.

▪ Identify potential risks, provide recommendations and compensating controls to cover them.

As a senior internal auditor, I conducted audits in over twenty subsidiaries worldwide, and across all group brands (Yves Rocher, Petit Bateau, Flormar, Dr Pierre Ricaud, etc.). My mission primarily consisted of organizing audits, establishing scopes, and assigning them to the team, participating in the development of the annual audit plan, as well as carrying out specific audit missions (in addition to regular ones) on cutting-edge topics at the request of the Management Committee. I also set up the first audit and internal control seminar, which brought together over fifty audit referents (whom I had previously identified and appointed), with the aim of supporting them in establishing a minimum level of internal control within their subsidiaries.