Information Security & Privacy Lead- North America

Job Summary

Kiwa North America is a growing business, undergoing integration and harmonization and you will play a key role in these activities. Based in our Houston, TX office, the Information Security & Privacy Officer (ISPO) is a high-impact dual role within the North America IT team. Integrated into Kiwa's Global ICT Security and Privacy functions, you will champion cybersecurity and data protection across our regional operations. While your primary focus is North America, you will operate within a multicultural, international framework where English is the standard language. Reporting directly to the Director, Information Technology \u2013 North America IT, you will also collaborate closely with the Kiwa Global Security Team. Your mission is to synchronize corporate security policies and privacy compliance with regional regulatory requirements, ensuring Kiwa's resilience against cyber threats and data breaches.

About the role

Information Security Management

• Drive the implementation of Kiwa's security policies specifically for Global ICT within North America.
• Act as the primary lead for North American business units in implementing SISP \u2013 Kiwa's Information Security Program.
• Manage the entire security landscape, from tactical "hands-on" incident response and vulnerability management to high-level strategic planning.
• Lead internal security assessments, perform risk management, and serve as the primary point of contact for external auditors.

Data Privacy & Compliance

• Serve as the regional subject matter expert on data protection laws and various state-specific regulations.
• Lead Data Protection Impact Assessments (DPIAs) and maintain comprehensive records of processing activities (ROPA) for the region.
• Coordinate the regional response to data privacy inquiries and potential breaches, working with legal and global privacy teams to ensure timely notification and mitigation.
• Adapt global privacy standards to meet North American regional requirements, ensuring all data handling\u2014from employee records to client data is compliant.

Advocacy & Collaboration

• Design and deliver integrated security and privacy awareness training programs that align with the broader Kiwa Group strategy.
• Partner with Global IT colleagues in the Netherlands and other international offices to ensure seamless integration of global standards.
• Provide "solicited and unsolicited" expert advice to leadership, acting as a trusted advisor on risk appetite and regulatory obligations.

Do you have what it takes?

We are looking for a driven, independent professional who takes total ownership of results. You must possess a sharp eye for detail and the ability to bridge the gap between technical security controls and complex legal privacy requirements. You are a lifelong learner who can translate "legalese" and "tech-speak" into actionable business advice.

Skills, Knowledge, and Experience

• Bachelor's or Master's degree in IT, Computer Science, or a related field.
• 2-5 years of Information Security professional experience, with a minimum of 1 year exposure to Privacy/Compliance.
• Deep knowledge of Information Security Management Systems (ISMS); NIST; SOC2 and CMMC requirements.
• Understanding of North American privacy laws and international standards (GDPR).
• Certifications: CISM, CISA, or CISSP (1 or more required)
• Exceptional verbal and written command of English; ability to influence international stakeholders across different time zones.
• Ability to travel occasionally (including international) to collaborate with global teams.

What can you expect from us in return?

Working at Kiwa North America means more than just managing security controls or a privacy policy; it's about shaping the future of a global leader. We offer:

• An influential role where your work directly protects our reputation and regional growth.
• Career growth opportunities within Kiwa North America and the SHV Group (60,000+ employees worldwide).
• Competitive package including health insurance, 401(k), health/childcare savings accounts, and paid time off.
• 3 days in-office / 2 days remote.