Information Security & Privacy Lead- North America

Information Security Management

• Drive the implementation of Kiwa’s security policies specifically for Global ICT within North America.
• Act as the primary lead for North American business units in implementing SISP – Kiwa’s Information Security Program.
• Manage the entire security landscape, from tactical "hands-on" incident response and vulnerability management to high-level strategic planning.
• Lead internal security assessments, perform risk management, and serve as the primary point of contact for external auditors.

Data Privacy & Compliance

• Serve as the regional subject matter expert on data protection laws   and various state-specific regulations.
• Lead Data Protection Impact Assessments (DPIAs) and maintain comprehensive records of processing activities (ROPA) for the region.
• Coordinate the regional response to data privacy inquiries and potential breaches, working with legal and global privacy teams to ensure timely notification and mitigation.
• Adapt global privacy standards to meet North American regional requirements, ensuring all data handling—from employee records to client data is compliant.

Advocacy & Collaboration

• Design and deliver integrated security and privacy awareness training programs that align with the broader Kiwa Group strategy.
• Partner with Global IT colleagues in the Netherlands and other international offices to ensure seamless integration of global standards.
• Provide "solicited and unsolicited" expert advice to leadership, acting as a trusted advisor on risk appetite and regulatory obligations.

We are looking for a driven, independent professional who takes total ownership of results. You must possess a sharp eye for detail and the ability to bridge the gap between technical security controls and complex legal privacy requirements. You are a lifelong learner who can translate "legalese" and "tech-speak" into actionable business advice.

Skills, Knowledge, and Experience

• Bachelor’s or Master’s degree in IT, Computer Science, or a related field.
• 2-5 years of Information Security professional experience, with a minimum of 1 year exposure to Privacy/Compliance.
• Deep knowledge of Information Security Management Systems (ISMS); NIST; SOC2 and CMMC requirements.
• Understanding of North American privacy laws and international standards (GDPR).
• Certifications: CISM, CISA, or CISSP (1 or more required)
• Exceptional verbal and written command of English; ability to influence international stakeholders across different time zones.
• Ability to travel occasionally (including international) to collaborate with global teams.

Working at Kiwa North America means more than just managing security controls or a privacy policy; it’s about shaping the future of a global leader. We offer:

• An influential role where your work directly protects our reputation and regional growth.
• Career growth opportunities within Kiwa North America and the SHV Group (60,000+ employees worldwide).
• Competitive package including health insurance, 401(k), health/childcare savings accounts, and paid time off.
• 3 days in-office / 2 days remote.