For our Group Legal & Compliance department, we are looking for a Group Compliance Manager to support the business in navigating complex regulatory frameworks with a focus on Artificial Intelligence and a broader remit across key EU digital, information security, privacy, data and sustainability regulations.
You will play a critical role in strengthening Dstny’s global compliance maturity, supporting its transition towards more complex customers and services, and ensuring readiness across a growing set of regulatory obligations identified in our Group Risk & Compliance (GRC) roadmap.
1. AI product compliance & governance
- Lead the implementation of the EU AI Act, identified as a top-priority regulatory topic for Dstny
- Translate AI regulatory requirements into practical governance frameworks, risk assessments and product requirements
- Develop and manage:
- AI product compliance documentation and audit readiness
- Vendor and subcontractor product compliance frameworks
- Support contractual negotiations involving AI-specific terms and annexes
- Ensure alignment between AI product compliance, product development and vendor ecosystem constraints
2. Information security & resilience regulatory framework
- Coordinate compliance efforts across key information security regulations and standards, including:
- EU NIS2 Directive
- EU DORA Regulation
- EU Cyber Resilience Act
- EU Cybersecurity Act
- National laws & regulations such as Germany’s BSIG / BSI-KritisV, UK’s Telecommunications Security Act and California’s CCPA where applicable
- Support certification and assurance programmes such as:
- ISO 9001 / ISO 27001 / ISO 27701 / ISAE3000 / SOC2 / BSI C5 / HDS / NEN7510
- Lead or support compliance initiatives related to:
- EU Data Act & Data Governance Act
- EU Digital Services Act
- EU e-Evidence Regulation (cross-border data access obligations)
- Support the definition of:
- Data-sharing frameworks
- Platform governance and transparency obligations
4. Accessibility, sustainability & ESG regulatory framework
- Support compliance and reporting initiatives for:
- EU Accessibility Act
- EU CSRD
- EU CSDDD
- Broader ESG and sustainability frameworks (including SBTi)
- Work with finance, legal and business teams to:
- Implement ESG data collection and reporting processes
- Support due diligence on supply chains and human rights impacts
- Build and scale a group-wide compliance operating model, aligned with Dstny’s GRC priorities
- Transition from a reactive (product) compliance approach to a structured, scalable framework, where compliance is embedded in the product lifecycle
- Improve, develop and implement policies:
- Create risk registers and prioritisation frameworks based on regulatory weight and maturity gaps
- Develop internal training & awareness programmes
- Set up and maintain a central compliance knowledge base
7. Business partnership & strategic enablement
Act as a trusted advisor to product, engineering and business teams
Support:
- Customer negotiations and tenders (particularly enterprise and service provider clients)
- Product roadmap decisions where compliance impacts go‑to‑market strategy
- Contribute to strategic discussions on AI and digital product offerings, ensuring regulatory readiness
- Coordinate compliance obligations across subcontractors and vendors, including:
- Cascading regulatory requirements (AI, security, data, ESG)
- Contractual protections and audit rights
- Support procurement in managing third‑party compliance risks across all relevant frameworks
Work closely with:
- Group Compliance Officer
- Group Information Security Officer
- Data Protection Officer
- Local Compliance Ambassadors
- Product, engineering, and procurement teams
- External advisors
- Represent Dstny in discussions with customers, regulators, authorities and partners on compliance matters
Qualifications
- 5+ years of experience in regulatory, compliance, technology law, information security or risk management;
- Working knowledge of the following regulations is a plus:
- AI Act, NIS2, DORA and related frameworks
- Broader EU digital and ESG regulatory landscape
- Experience in SaaS or technology environments is strongly preferred;
- Ability to operate in a multi‑jurisdictional and fast‑evolving regulatory environment;
- Strong stakeholder management and communication skills;
- Pragmatic, structured and hands‑on approach;
- Fluent in English (Dutch/French are a plus).
What we can offer you...
- A pivotal role in building and scaling Dstny’s Group‑wide compliance framework across Europe and beyond.
- Direct exposure to cutting‑edge topics such as AI regulation and digital resilience frameworks
- Close collaboration with senior leadership and key technical teams
- A competitive salary, including an eco‑friendly company car with fuel/charging card or an interesting flexible mobility budget.
- Seniority days: extra vacation days based on your seniority (1 day every 3 years, up to a maximum of 4 days)
- Flex Income Plan: tailor extra advantages using your budget of your 13th month
- Access to Benefits@Work: enjoy discounts at a wide range of popular brands and retailers
- Flexible working hours, with the possibility of remote work. Because in digitalization, we should set a good example, right?
- A pleasant working environment in a renewed Dstny house, customized to the wishes of our Destinians.
- A great team of colleagues and wonderful customers.
- A friendly atmosphere with regular fun team‑building activities or company events.
- Always fresh soup, fruit, and delicious coffee.
- To be a part of the Dstny family: an ambitious, inclusive and people‑centric organisation