AVP, EMEA REGIONAL PRIVACY SPECIALIST Data Privacy specialist for 26 countries in the EMEA region. GDPR subject matter expert. Reports to regional and global senior management. Responsibilities include:• Drafting GDPR compliant policy, procedures, guidance and standards applicable to MetLife controller and processor entities including those relating to: - DPO target operating model; - 3rd party processor assessment and management; - Data Protection Impact Assessments and Privacy by Design; - Data Subject rights requests; and - Data incident management, including data breach playbook design in conjunction with IT Risk & Security and Crisis Management functions.• Provision of strategic advice and guidance to business functions (including Legal, IT Security, Data Governance, Risk, Audit, HR, Data Analytics, Marketing and operational functions) in relation to GDPR compliance.• Delivery of GDPR training and education to global and regional senior management and Board members.• Preparation of GDPR guidance notes for legal, technical and operational audiences.• Design of a GDPR compliant monitoring, testing and reporting framework.• Monitoring of Article 29 Working Party guidance, local Regulator guidance and country level legislation in relation to GDPR.• Design and development of internal SharePoint based solution for meeting Article 30 record keeping obligations and identifying high risk processing activities.

• Developed an enterprise risk management framework for the Group. Designed risk assessments, business continuity and disaster recovery policies and procedures. • Drafted the Group's data protection policy, privacy and fair processing notices, cookie policy and IT security policy.• Designed and implemented multi-jurisdictional data transfer framework incorporating model clauses contracts.• Evaluated contractual obligations to institutional clients in relation to IT risk and data protection practices. Coordinated responses to client enquiries and advised senior management on global trends in client expectations.• Performance of Privacy Impact Assessments.• Advised on data protection obligations and risk implications of 3rd party service provider contracts including Cloud Computing, SaaS and debt collection contracts.• Acted as data protection SME for regional data privacy managers and provided advice and support for regional data protection queries.• Delivered jurisdiction specific data protection training for global business units.

• Established risk control plan for the management of the Group's exposure to IT and data privacy risk.• Led a major project to create a global strategy to rationalise and synchronise sources of employee related data held in manifold data stores across the Group in order to reduce data duplication and improve data accuracy. • Member of the Cayman Islands data protection IT sub-committee advising the main data protection working group on IT related issues relating to the drafting and implementation of data protection legislation in the Cayman Islands.

• Conducted the architectural design and global deployment of the Group's CRM and direct marketing software. Developed a resource portal with video training materials, guidance and advisory notes.• Project managed the deployment of the Group's global Intranet portal on SharePoint 2007 and 2010 platforms. Designed the portal architecture and site structure. Worked with developers to implement bespoke web parts.

• Advised the Managing Partner on improvements to the firm’s structure and business processes. Conducted a major overhaul of the firm's IT infrastructure.• Designed bespoke business application software.

• Founding member of Lawsys Ltd, a computer software design and development company, developing case management software for the legal and insurance sectors.• Responsible for system design and development, product marketing, software deployment and the provision of consultancy services to senior management of client firms.