Local Compliance and Data Protection Officer

• Implement and maintain robust internal controls, compliance frameworks, and procedures aligned with U.S. and Canadian regulatory requirements (e.g., SOX relevance, AML/ATF guidance, industry standards, federal/provincial/state laws).
• Prepare clear, accurate monthly compliance reports and risk updates for leadership.
• Develop and oversee effective compliance programs that identify, mitigate, and respond to regulatory and policy risks.
• Lead compliance training for managers and employees, fostering a culture of awareness around compliance, financial crime prevention, sanctions, and ethical business behavior.
• Serve as the primary point of contact with the Veridos Chief Compliance Officer (CCO) for all compliance related matters across North America.

• Ensure alignment with data privacy requirements under both U.S. and Canadian law, including:

• Canada: PIPEDA, provincial privacy acts (e.g., Quebec Law 25)
• USA: evolving state privacy laws (e.g., CCPA/CPRA, VCDPA, CPA), federal guidance, and industry best practices
• Oversee implementation of corporate data privacy standards, policies, and retention rules.
• Provide guidance to local leadership on privacy implications for bids, proposals, commercial activities, and operational processes.
• Investigate data incidents, breaches, or privacy concerns, ensuring proper reporting, documentation, and remediation actions.
• Act as the liaison with the Veridos Chief Privacy Officer (CPO) for all North American privacy matters.

• Support compliance with Veridos ESG guidelines and North American sustainability expectations, including non financial risk management, ethical sourcing, and community impact.
• Assess and report ESG performance across U.S. and Canadian operations, with a focus on environmental footprint, workplace policies, and governance practices.
• Track sustainability metrics and progress to support long term economic, social, and environmental objectives.
• Stay informed of evolving U.S. and Canadian ESG regulations and standards (e.g., SEC climate related reporting rules, CSA/OSFI guidance) and benchmark against industry peers.
• Recommend strategies, policies, and action plans that strengthen regional ESG performance.

• 5-8 years of experience in compliance, data protection, privacy, or regulatory affairs, ideally within a U.S. or Canadian regulatory environment.

• Exceptional English communication skills (written and verbal); strong public speaking and interpersonal abilities.
• French fluency is a strong asset given Canadian bilingual environment.
• High proficiency in Microsoft Office (Outlook, Word, Excel, PowerPoint, Visio).
• Ability to balance multiple priorities, manage tight deadlines, and work independently with minimal supervision.
• Analytical, proactive, and solution-oriented mindset with strong critical thinking and strategic planning abilities.
• High degree of professionalism, integrity, confidentiality, and accountability.
• Demonstrated resilience when enforcing policy requirements and navigating pushbacks from stakeholders.
• Be a collaborative team player, supporting local management and contributing positively to cross functional initiatives.

• Juris Doctor (JD), master's in business or accounting, or another relevant post secondary degree suitable for North American compliance and data protection work.

• Hybrid work - home and office setting
• Required to sit in front of a computer for long periods of time.
• Meet strict reporting deadlines.

Giesecke+Devrient