Nisreen Faddoul, CCEP-I

Strategic Compliance and Risk Management:

• Design and lead a comprehensive global compliance programs, aligning with best standards like the EU GDPR, California CCPA, Canada's PIPEDA, FCPA along with HIPAA, FINRA and SOX.
• Develop and implement a unified set of global compliance policies (e.g., Anti-Corruption, Sanctions) adopted across all international practice areas.
• Advise senior leadership on strategic planning and risk mitigation, managing regulatory exposure across multiple jurisdictions.
• Author and enforce a company-wide code of conduct and global policies, standardizing ethical practices across all international operations.
• Direct international security certifications and audits, proactively identifying and addressing compliance gaps across global offices.
• Reduce global storage costs by 40% by implementing a centralized data retention schedule and governance framework.

Team Leadership and Development:

• Recruit, mentor, and develop a high-performing team of compliance, privacy, and contracts management professionals.
• Manage and streamline contracts management requests, ensuring efficient and compliant workflows from drafting to execution.
• Third Parties: Collaborate with internal stakeholders to complete client due diligence questionnaires and onboarding forms, ensuring accuracy and regulatory compliance.
• Implement a robust global third-party risk management program, including due diligence, continuous monitoring, and KYC checks.

Data Protection and Oversight:

• Oversee the development and execution of a global data protection program, handling cross-border data transfers in accordance with international regulations.
• Manage data subject access requests (DSARs), privacy impact assessments, and international privacy training initiatives.
• Lead a cross-functional data governance committee to ensure the quality and integrity of data globally.

• Compliance & Risk Management: Established and enforced comprehensive compliance protocols, ensuring adherence to regulations including SOX, PCI DSS, CCPA, and the FCPA.
• Privacy Program Oversight: Directed the company's privacy program, managing data subject access requests, conducting data mapping, and developing employee training materials.
• Third-Party Oversight: Reviewed contracts to ensure third-party vendors maintained compliance with internal privacy policies.
• Policy Development: Implemented effective data privacy policies to ensure the protection and security of sensitive information.

• Developed and implemented a unified set of global compliance policies (e.g., Anti-Corruption, Sanctions) adopted across all international business units.
• Developed and implemented compliance strategies to meet regulatory requirements across multiple departments.
• Conducted comprehensive audits to identify compliance gaps and recommend corrective actions.
• Trained staff on compliance policies and procedures, fostering a culture of accountability and awareness.
• Previously Senior Paralegal