Information Security & Privacy Officer - North America

Overview Kiwa North America is a growing business, undergoing integration and harmonization and you will play a key role in these activities. Based in our Houston, TX office, the Information Security & Privacy Officer (ISPO) is a high-impact dual role within the North America IT team. Integrated into Kiwa's Global ICT Security and Privacy functions, you will champion cybersecurity and data protection across our regional operations. While your primary focus is North America, you will operate within a multicultural, international framework where English is the standard language. Reporting directly to the Director, Information Technology - North America IT, you will also collaborate closely with the Kiwa Global Security Team. Your mission is to synchronize corporate security policies and privacy compliance with regional regulatory requirements, ensuring Kiwa's resilience against cyber threats and data breaches. Responsibilities Information Security Management Drive the implementation of Kiwa's security policies specifically for Global ICT within North America. Act as the primary lead for North American business units in implementing SISP - Kiwa's Information Security Program. Manage the entire security landscape, from tactical "hands-on" incident response and vulnerability management to high-level strategic planning. Lead internal security assessments, perform risk management, and serve as the primary point of contact for external auditors. Data Privacy & Compliance Serve as the regional subject matter expert on data protection laws and various state-specific regulations. Lead Data Protection Impact Assessments (DPIAs) and maintain comprehensive records of processing activities (ROPA) for the region. Coordinate the regional response to data privacy inquiries and potential breaches, working with legal and global privacy teams to ensure timely notification and mitigation. Adapt global privacy standards to meet North American regional requirements, ensuring all data handling-from employee records to client data is compliant. Advocacy & Collaboration Design and deliver integrated security and privacy awareness training programs that align with the broader Kiwa Group strategy. Partner with Global IT colleagues in the Netherlands and other international offices to ensure seamless integration of global standards. Provide "solicited and unsolicited" expert advice to leadership, acting as a trusted advisor on risk appetite and regulatory obligations. Qualifications Bachelor's or Master's degree in IT, Computer Science, or a related field. 2-5 years of Information Security professional experience, with a minimum of 1 year exposure to Privacy/Compliance. Deep knowledge of Information Security Management Systems (ISMS); NIST; SOC2 and CMMC requirements. Understanding of North American privacy laws and international standards (GDPR). Certifications: CISM, CISA, or CISSP (1 or more required) Exceptional verbal and written command of English; ability to influence international stakeholders across different time zones. Ability to travel occasionally (including international) to collaborate with global teams. * Please Note that selected candidates will be required to pass a drug, background and reference screening. Equal Opportunity Employment Kiwa is an equal opportunity employer. We are committed to an inclusive, equitable and accessible workplace. Qualified applicants will receive consideration for employment without regard to race, color, citizenship, creed, sex, sexual orientation, gender identity, gender expression, age, marital status, family status or disability. If you require an accommodation at any time during the recruitment or application process, please contact Human Resources. Kiwa does not accept unsolicited resumes from any 3rd party agencies. No fee will be paid to 3rd parties who submit unsolicited resumes to any Kiwa employee. Resumes from approved vendors must be specifically requested by Kiwa and approved by the T2 Utility Engineers Talent Acquisition Team. #J-18808-Ljbffr T2 UES, Inc.