Gerardo Guevara Flores

Ethics, Compliance and Governance executive with more than 15 years of experience helping multinational organizations strengthen ethical culture, governance, compliance and enterprise risk capabilities across highly regulated industries throughout Latin America. Recognized for partnering with executive leadership, Legal, Medical Affairs, Commercial and Regulatory Affairs teams to build trusted relationships, strengthen organizational integrity and enable responsible business decisions through risk-based compliance strategies.

Former Regional Compliance

Officer and LATAM Data Privacy Counsel with extensive experience designing regional compliance programs, ethics initiatives, data privacy governance, anti-bribery frameworks and enterprise risk capabilities that balance regulatory expectations with sustainable business growth. Known for influencing without authority, developing high-trust relationships across multicultural environments and transforming Compliance from a control function into a strategic business partner that supports innovation, patient trust and long-term organizational success.

Founder & Principal Advisor – Governance, Risk, Compliance & Corporate Governance at Self-Employed (2025-03 – Present)

Founded an executive advisory practice focused on helping organizations strengthen Governance, Risk & Compliance (GRC), Enterprise Risk Management, Corporate Governance, Technology Risk, Data Privacy and Internal Control capabilities across highly regulated industries. Provide executive advisory services to senior leadership teams, supporting strategic decision-making through the design, implementation and transformation of governance, compliance and enterprise risk management frameworks.

• Advise executive leadership on governance transformation initiatives, enterprise risk management, technology risk, compliance, ethics, data privacy and internal control frameworks aligned with organizational strategy and international best practices.
• Serve as strategic advisor supporting the development and enhancement of Enterprise Risk Management, Compliance, Corporate Governance and Internal Control capabilities in energy sector (Mexico).
• Design an integrated Governance, Risk & Compliance operating model.
• Establish Enterprise Risk Management methodology aligned with ISO 31000 principles.
• Develop Corporate Governance and Internal Control frameworks supporting executive oversight.
• Strengthen Compliance and Ethics capabilities, including Anti-Bribery & Corruption, Financial Crime Prevention and Conflict of Interest governance.
• Design Technology Risk Management and Third Party Risk oversight capabilities.
• Develop governance models that enable executive decision-making through integrated risk intelligence.
• Provide advisory services on Governance, Risk & Compliance (GRC) Operating Models.
• Advise on Enterprise Risk Management.
• Support Technology Risk Governance.
• Advise on Data Privacy Governance.
• Support Information Security Governance.
• Advise on Third Party Risk Management.
• Support Internal Control Frameworks.
• Support Regulatory Compliance Programs.
• Advise on Anti-Money Laundering (AML).
• Support Ethics & Compliance Programs.
• Advise on Corporate Governance.
• Support Executive Risk Reporting.

Compliance Officer & Data Privacy Counsel LATAM at Merck KGaA (2021-08 – 2025-03)

Served as a trusted business partner to executive leadership, Legal, Commercial, Medical Affairs, Regulatory Affairs, Technology and Information Security teams, providing strategic guidance on Healthcare Compliance, Ethics, Data Privacy and Governance matters across Latin America. Supported business growth by helping leaders navigate complex regulatory environments, balance compliance expectations with commercial objectives and promote responsible decision-making grounded in integrity. Led regional Healthcare Compliance initiatives for Colombia and Ecuador while serving as LATAM Data Privacy Counsel, strengthening ethics, governance and compliance capabilities across multiple jurisdictions.

Designed and enhanced Compliance Monitoring Programs, Data Privacy Governance frameworks, Anti-Bribery initiatives and Compliance Risk Assessments that improved regulatory readiness, strengthened organizational integrity and reinforced ethical business practices. Partnered with senior leadership to embed compliance into business operations, enabling proactive risk management while fostering a culture of transparency, accountability and ethical leadership.

• Designed and implemented the LATAM Personal Data Risk Framework, strengthening privacy governance and aligning regional operations with evolving regulatory requirements.
• Enhanced regional Compliance Monitoring capabilities through risk-based methodologies that improved visibility of compliance risks and supported executive decision-making.
• Advised executive leadership on Healthcare Compliance, Ethics, Data Privacy and Governance matters across multiple Latin American jurisdictions.
• Supported investigations, regulatory assessments and remediation initiatives, strengthening organizational integrity and reinforcing stakeholder confidence.
• Partnered with Technology and Information Security teams to strengthen governance over privacy and technology-related compliance risks.
• Collaborated with cross-functional leadership to promote ethical culture, responsible business conduct and sustainable compliance practices.
• Strengthened Healthcare Compliance, Ethics and Governance capabilities across Latin America by transforming Compliance into a trusted business partner that enabled responsible growth, reinforced organizational integrity and supported executive decision-making within a highly regulated healthcare environment.

Regional Compliance & Data Privacy Officer LATAM at WTW - Willis Towers Watson (2016-11 – 2021-08)

Partnered with Boards of Directors, executive leadership teams and senior business stakeholders to strengthen governance, enterprise risk management and strategic decision-making across complex organizational environments. Provided executive advisory services that helped organizations integrate governance, compliance and risk management into business strategy, enabling informed decisions while supporting sustainable organizational growth. Worked closely with executive leadership to assess governance maturity, facilitate strategic risk discussions and strengthen organizational resilience through practical, business-oriented recommendations.

Supported organizations undergoing regulatory and governance transformations by aligning enterprise risk management practices with business objectives, executive priorities and evolving regulatory expectations.

• Advised executive leadership teams on governance, enterprise risk and regulatory transformation initiatives across multiple organizations operating in highly regulated industries.
• Facilitated Board and Executive Committee discussions that strengthened governance maturity, improved strategic alignment and enhanced executive decision-making.
• Designed enterprise risk assessment methodologies that enabled business leaders to better understand strategic, operational and regulatory risks while supporting informed decision-making.
• Supported governance transformation initiatives by strengthening organizational accountability, executive oversight and cross-functional collaboration.
• Helped organizations embed risk-informed thinking into business planning, promoting a balanced approach between growth opportunities and responsible risk management.
• Built trusted relationships with executive stakeholders by translating complex governance and regulatory challenges into practical business recommendations.
• Strengthened executive decision-making by helping organizations integrate governance, enterprise risk and regulatory considerations into business strategy, improving organizational resilience while fostering a culture of accountability and responsible leadership.

Corporate Compliance Officer at Assurant Insurance Mexico (2014-07 – 2016-10)

Partnered with executive leadership and business functions to strengthen governance, integrate enterprise risk management into strategic decision-making and promote a proactive approach to organizational resilience. Worked collaboratively with business leaders to balance operational objectives, regulatory expectations and enterprise risks, enabling informed decisions that supported sustainable business performance. Supported the evolution of Enterprise Risk Management capabilities by strengthening governance practices, facilitating executive risk discussions and enhancing organizational visibility over strategic and operational risks.

Collaborated with cross-functional stakeholders to reinforce governance structures, improve internal control effectiveness and integrate risk management into business planning and executive oversight.

• Strengthened Enterprise Risk Management capabilities by enhancing governance processes that improved executive visibility over strategic, operational and emerging risks.
• Facilitated executive risk assessments and governance discussions, enabling business leaders to prioritize key risks and make informed strategic decisions.
• Supported governance committees through executive reporting, risk analysis and actionable recommendations that strengthened organizational resilience.
• Partnered with business leadership to integrate enterprise risk management into operational planning, promoting collaboration between business objectives and responsible risk management.
• Contributed to the enhancement of governance frameworks and internal control environments that reinforced accountability, transparency and executive oversight.
• Built trusted relationships across business functions by translating complex risk scenarios into practical recommendations aligned with organizational priorities.
• Helped strengthen governance and enterprise risk capabilities by positioning risk management as a strategic business partner, enabling executive leadership to make more informed decisions while fostering accountability, collaboration and long-term organizational resilience.

Compliance Officer at Zurich Insurance Company (2012-11 – 2014-07)

Supported the Enterprise Risk Management function by partnering with executive leadership to strengthen governance, improve organizational resilience and integrate risk management into strategic and operational decision-making. Contributed to the evolution of enterprise risk capabilities by helping business leaders understand emerging risks, evaluate strategic alternatives and promote a proactive approach to governance and accountability. Collaborated with senior leadership and cross-functional teams to strengthen governance practices, facilitate enterprise risk assessments and enhance executive visibility over strategic, operational and regulatory risks.

Supported governance committees through executive reporting, risk analysis and actionable recommendations that enabled informed business decisions while reinforcing organizational resilience.

• Contributed to the implementation and continuous enhancement of Enterprise Risk Management frameworks aligned with international insurance industry standards, strengthening governance maturity and executive oversight.
• Facilitated enterprise-wide risk assessments that improved executive understanding of strategic, operational and emerging risks across the organization.
• Developed executive reporting that increased transparency, strengthened governance discussions and supported informed decision-making at senior leadership level.
• Partnered with business leaders to integrate enterprise risk management into planning processes, promoting collaboration between business objectives and responsible risk management.
• Supported governance initiatives that reinforced accountability, organizational resilience and a proactive risk culture throughout the organization.
• Designed enterprise risk assessment methodologies that enabled business leaders to better understand strategic, operational and regulatory risks while supporting informed decision-making.
• Supported governance transformation initiatives by strengthening organizational accountability, executive oversight and cross-functional collaboration.
• Helped organizations embed risk-informed thinking into business planning, promoting a balanced approach between growth opportunities and responsible risk management.
• Built collaborative relationships across business functions by translating complex risk information into practical insights that supported executive decision-making.
• Contributed to strengthening enterprise governance by helping executive leadership integrate risk management into business strategy, improving organizational resilience and laying the foundation for a business-oriented approach to governance, ethics and compliance that became a defining characteristic of subsequent leadership roles.

Compliance Officer – Financial Crime & Regulatory Compliance at HSBC Mexico (2006-10 – 2012-11)

Developed a strong foundation in regulatory compliance, ethical decision-making and financial integrity by supporting one of the world's most highly regulated financial institutions. Partnered with Legal, Operations, Business and Compliance teams to strengthen governance, reinforce regulatory discipline and promote responsible business practices within a complex international regulatory environment. Supported enterprise compliance initiatives focused on financial crime prevention, regulatory compliance and governance by collaborating with cross-functional teams to strengthen internal controls, improve regulatory readiness and enhance organizational accountability.

Contributed to a business-oriented compliance approach that balanced regulatory obligations with operational effectiveness, helping business leaders navigate evolving regulatory expectations while protecting organizational integrity.

• Supported Anti-Money Laundering (AML), FATCA, CRS and Financial Crime Compliance initiatives, strengthening governance and regulatory compliance across banking operations.
• Collaborated with business, Legal and operational leadership to strengthen internal controls, regulatory oversight and compliance effectiveness.
• Participated in compliance assessments and remediation initiatives that reinforced governance, accountability and regulatory readiness.
• Contributed to executive compliance reporting that improved visibility of regulatory risks and supported informed management decisions.
• Built collaborative relationships across business functions by translating regulatory requirements into practical business guidance.
• Strengthened organizational integrity by promoting a culture of compliance, accountability and responsible decision-making within a highly regulated financial environment.
• Established a strong foundation in governance, ethics and regulatory compliance by developing the judgment, business discipline and integrity that later enabled successful leadership across Enterprise Risk, Governance, Data Privacy and Healthcare Compliance functions within multinational organizations.

Master of Business Administration and Management in MBA – EGADE Business School, Tecnológico de Monterrey (2017)

Bachelor of Business Administration in BBA – Tecnológico de Monterrey (ITESM) (2005)