Regulatory, supervisory and remediation assignments frequently contain confidential information. The examples below therefore describe the work, jurisdiction and outcome without identifying clients.
Every engagement shown was led or delivered with direct senior adviser involvement.
From regulatory perimeter and feasibility to application, institution readiness and regulator dialogue.
Prepared four accepted SAMA sandbox applications and supported a bank branch establishment, payment institution, insurance aggregator and SME credit applications, together with a CMA Advisory & Arranging application.
Supported an Account Information Service Provider through licensing readiness, IT policy and standards, system establishment advisory and AML process design.
Prepared payment and electronic money institution applications, aligning governance, operating documentation and IT readiness with the intended activity model.
Structures that connect architecture, data, technology risk and accountable operations.
Supported a wealth management group with technology and outsourcing compliance across its markets, including Malta regulator engagement and remediation that concluded without a financial penalty.
Established risk management and IT governance structures; separately developed a credit policy and supported the design of a lending decision tree.
Supported technology and information architecture design and prepared a target operating structure with an executable digital transformation roadmap.
Designed IT and AML governance for a crypto-asset business and delivered a separate tokenisation initiative from operating concept to implementation structure.
Independent testing, regulator-ready reporting and closure evidence.
Performed a business continuity assessment for a data centre and produced an ISAE 3000 assurance report.
Performed an ISO/IEC 27001 audit for a German organisation and supported another organisation through its certification readiness process.
Completed IT audits for two crypto-asset companies and issued independent reports covering governance, control and technology risk.
Conducted an AUP engagement covering source code, functionality and the software development lifecycle, with a formal report.
Prepared a regulated service provider's response to an independent audit finding and managed the related BDDK engagement.
Decision support before capital, operating model and transformation commitments are made.
Assessed the commercial viability of establishing a payment institution and tested the business model under alternative operating and downside scenarios.
Prepared a game company for the programme through corporate readiness, process documentation, technology controls and application support.