Giesecke+Devrient · 22 hours ago
Local Compliance and Data Protection Officer
Giesecke+Devrient is a global SecurityTech company specializing in secure and innovative identity solutions. They are seeking an experienced Local Compliance and Data Protection Officer to oversee compliance, data protection, ESG, and sustainability activities across U.S. and Canadian operations.
Cyber SecurityIdentity ManagementInformation TechnologyNetwork SecuritySecurity
Responsibilities
Implement and maintain robust internal controls, compliance frameworks, and procedures aligned with U.S. and Canadian regulatory requirements (e.g., SOX relevance, AML/ATF guidance, industry standards, federal/provincial/state laws)
Prepare clear, accurate monthly compliance reports and risk updates for leadership
Develop and oversee effective compliance programs that identify, mitigate, and respond to regulatory and policy risks
Lead compliance training for managers and employees, fostering a culture of awareness around compliance, financial crime prevention, sanctions, and ethical business behavior
Serve as the primary point of contact with the Veridos Chief Compliance Officer (CCO) for all compliance related matters across North America
Ensure alignment with data privacy requirements under both U.S. and Canadian law, including: Canada: PIPEDA, provincial privacy acts (e.g., Quebec Law 25) USA: evolving state privacy laws (e.g., CCPA/CPRA, VCDPA, CPA), federal guidance, and industry best practices
Oversee implementation of corporate data privacy standards, policies, and retention rules
Provide guidance to local leadership on privacy implications for bids, proposals, commercial activities, and operational processes
Investigate data incidents, breaches, or privacy concerns, ensuring proper reporting, documentation, and remediation actions
Act as the liaison with the Veridos Chief Privacy Officer (CPO) for all North American privacy matters
Support compliance with Veridos ESG guidelines and North American sustainability expectations, including non financial risk management, ethical sourcing, and community impact
Assess and report ESG performance across U.S. and Canadian operations, with a focus on environmental footprint, workplace policies, and governance practices
Track sustainability metrics and progress to support long term economic, social, and environmental objectives
Stay informed of evolving U.S. and Canadian ESG regulations and standards (e.g., SEC climate related reporting rules, CSA/OSFI guidance) and benchmark against industry peers
Recommend strategies, policies, and action plans that strengthen regional ESG performance
Qualification
Required
5–8 years of experience in compliance, data protection, privacy, or regulatory affairs, ideally within a U.S. or Canadian regulatory environment
Exceptional English communication skills (written and verbal); strong public speaking and interpersonal abilities
High proficiency in Microsoft Office (Outlook, Word, Excel, PowerPoint, Visio)
Ability to balance multiple priorities, manage tight deadlines, and work independently with minimal supervision
Analytical, proactive, and solution-oriented mindset with strong critical thinking and strategic planning abilities
High degree of professionalism, integrity, confidentiality, and accountability
Demonstrated resilience when enforcing policy requirements and navigating pushbacks from stakeholders
Be a collaborative team player, supporting local management and contributing positively to cross functional initiatives
Juris Doctor (JD), master's in business or accounting, or another relevant post secondary degree suitable for North American compliance and data protection work
Preferred
French fluency is a strong asset given Canadian bilingual environment
Benefits
Up to 5% Bonus
Company
Giesecke+Devrient
Giesecke+Devrient is a global technology group that provides physical and digital security technologies.
Funding
Current Stage
Late StageTotal Funding
$135.44M2022-11-23Debt Financing· $135.44M
Leadership Team
Recent News
BiometricUpdate.com
2026-01-11
2025-12-02
Fintechnews Middle East
2025-11-23
Company data provided by crunchbase