رضوان قريشي

• Lead the Governance, Risk, Compliance, and Privacy operations at vFairs LLC, ensuring alignment with the organization's strategic objectives.
• Established a formal GRC and Privacy Program, along with a comprehensive roadmap that aligns with regulatory requirements and industry standards.
• Serve as the Data Protection Officer (DPO), overseeing data privacy initiatives and maintaining compliance across all operations.
• Designed and implemented robust controls, collaborating with process and control owners to develop detailed policies, procedures, and documentation.
• Enhance the organization's risk management and information security posture through collaboration with stakeholders, clients, partners, service providers, and vendors.
• Work closely with Legal, HR, and other key departments to sustain an effective and compliant privacy program.
• Manage the Third-Party Risk Management program, ensuring all external partners meet security and compliance standards.
• Lead risk assessments and oversee compliance certifications and attestations, including ISO 27001, AICPA SOC 2 Type 2, GDPR, CCPA, Microsoft SSPA, EU-US Data Privacy Framework, FedRAMP, TX-RAMP, NIST CSF, GSA Schedule.
• Launched and manage a security awareness training program, strengthening the organization's overall security culture.
• Collaborate with sales and customer success teams to address complex security, compliance, and legal requirements, facilitating sales and maintaining client compliance.
• Provide critical support in RFP processes, focusing on security and IT aspects, contributing to winning key contracts.
• Ensure that all vFairs customers have signed Data Processing Agreements (DPAs) where required, and proactively manage these agreements to keep clients informed about security updates and SLA compliance.

Minor Hotels logo
Senior Manager Data Privacy & GovernanceSenior Manager Data Privacy & Governance
Minor Hotels · Full-timeMinor Hotels · Full-time
Jan 2023 - Feb 2024 · 1 yr 2 mosJan 2023 to Feb 2024 · 1 yr 2 mos
Bangkok City, Thailand · On-siteBangkok City, Thailand · On-site
helped me get this jobLinkedIn helped me get this job
• Lead the establishment and maintenance of a worldwide data privacy and governance program for the Minor Hotel Group. Provide direction to Data Protection teams spanning Europe, Australia/New Zealand, the Middle East, and Africa, overseeing a substantial portfolio of more than 500 hotels and mixed-use businesses.
• Core member of the Minor Hotel Group Data Protection Executive Committee (DPEC) and Data Council Working Group.
• Develop and promote the responsible use of data without losing sight of commercial interests and goals.
• Enhancement of the data privacy and governance culture.
• Collaborate with IT, Risk, and Compliance functions to achieve data protection objectives within the Digital Business. This involves strategizing risk management and compliance efforts, establishing business continuity plans, implementing security controls, aligning policies, and continually monitoring effectiveness.

Noteworthy Projects:
• Data Mapping (RoPA) rollout for the Hotel Group and Mixed-Use Business.
• Compliance readiness projects to comply with the requirements of applicable Data Protection Laws (PDPA, GDPR, PIPL etc.).
• Implementation of a Privacy Assurance System to automate and improve processes related to Privacy Operations.
• Implementation of a self-service Privacy Trust Center to provide Minor customers with access to security and privacy resources.

• As part of the Operational Excellence Department under Group Operations, worked with Business to analyse processes for improvements, documentation of procedures and streamlining across QNB Group (Head Office and International Branches).
• Performed review of business processes, policies and procedures identifying key controls, and risks while meeting QNB Group quality standards.
• Closely coordinated with Group Operations, Risk and Compliance functions to protect business interests and ensure compliance with regulatory authorities.
• Managed policy and procedure changes to adapt to changing business needs and IT system enhancements.

Notable Projects:
• Trade Finance, Group HO (Trade Innovation Plus Implementation)
• Fund Administration, Investment Banking (Mysis Implementation)
• QNB UK (Trade Innovation Plus Implementation)
• Group Operations
• Group Operations, Retail Banking, Group Human Capital & Group Administration and General Services.