Sarshar

Director of Regulatory Compliance Documentation

ComplDoc • Full time

Jan 2022 - Present • 4 yrs 4 mos

1. Architected end-to-end technical documentation frameworks for High-Risk AI systems under Regulation EU 2024/1689, covering the full Annex IV evidence structure across Article 9 risk management, Article 10 data governance, Article 11 technical documentation, Article 13 transparency obligations, and Article 17 quality management system requirements. 2. Produced NIS2 Directive cybersecurity governance documentation packages for entities across critical infrastructure and digital service sectors, including ICT risk management frameworks, incident classification and reporting procedures, and supply chain security policies aligned to Directive EU 2022/2555. 3. Developed DORA-aligned operational resilience documentation for financial entities, covering ICT risk management frameworks, digital operational resilience testing documentation, and ICT third-party risk registers as required under Regulation EU 2022/2554. 4. Bridged documentation gaps between technical engineering teams and legal counsel to produce audit-ready records of AI system design, model training data governance, and algorithmic transparency evidence for General Purpose AI models under Articles 51 to 55 of Regulation EU 2024/1689. 5. Designed ISO/IEC 42001-aligned AI Management System documentation structures, mapping organisational AI governance controls to both the ISO standard and the EU AI Act Quality Management System requirements under Article 17. 6. Built GDPR documentation frameworks including Records of Processing Activities under Article 30, Data Protection Impact Assessments under Article 35, and data subject rights procedures for organisations operating AI systems that process personal data across multiple legal bases.