Information Security & Privacy Officer
Houston, United States
Apply for the position
Job details
- Function
- ICT
- Job type
- Hybrid
Job Summary
Kiwa North America is a growing business, undergoing integration and harmonization and you will play a key role in these activities. Based in our Houston, TX office, the Information Security & Privacy Officer (ISPO) is a high-impact dual role within the North America IT team. Integrated into Kiwa’s Global ICT Security and Privacy functions, you will champion cybersecurity and data protection across our regional operations.About the role
While your primary focus is North America, you will operate within a multicultural, international framework where English is the standard language. Reporting directly to the Director, Information Technology – North America IT, you will also collaborate closely with the Kiwa Global Security Team. Your mission is to synchronize corporate security policies and privacy compliance with regional regulatory requirements, ensuring Kiwa’s resilience against cyber threats and data breaches.
Information Security Management
- Framework Execution: Drive the implementation of Kiwa’s security policies specifically for Global ICT within North America.
- Regional Support: Act as the primary lead for North American business units in implementing SISP – Kiwa’s Information Security Program.
- Full-Spectrum Security: Manage the entire security landscape, from tactical "hands-on" incident response and vulnerability management to high-level strategic planning.
- Audits & Assessments: Lead internal security assessments, perform risk management, and serve as the primary point of contact for external auditors.
Data Privacy & Compliance
- Privacy Stewardship: Serve as the regional subject matter expert on data protection laws and various state-specific regulations.
- Data Mapping & DPIAs: Lead Data Protection Impact Assessments (DPIAs) and maintain comprehensive records of processing activities (ROPA) for the region.
- Incident Management: Coordinate the regional response to data privacy inquiries and potential breaches, working with legal and global privacy teams to ensure timely notification and mitigation.
- Policy Alignment: Adapt global privacy standards to meet North American regional requirements, ensuring all data handling—from employee records to client data is compliant.
Advocacy & Collaboration
- Culture Building: Design and deliver integrated security and privacy awareness training programs that align with the broader Kiwa Group strategy.
- Cross-Functional Partner: Partner with Global IT colleagues in the Netherlands and other international offices to ensure seamless integration of global standards.
- Stakeholder Advisory: Provide "solicited and unsolicited" expert advice to leadership, acting as a trusted advisor on risk appetite and regulatory obligations.
Do you have what it takes?
We are looking for a driven, independent professional who takes total ownership of results. You must possess a sharp eye for detail and the ability to bridge the gap between technical security controls and complex legal privacy requirements. You are a lifelong learner who can translate "legalese" and "tech-speak" into actionable business advice.
Skills, Knowledge, and Experience
- Education: Bachelor’s or Master’s degree in IT, Computer Science, or a related field.
- Experience: 5+ years of Information Security professional experience, with a minimum of 1 year exposure to Privacy/Compliance.
- Security Expertise: Deep knowledge of Information Security Management Systems (ISMS); NIST; SOC2 and CMMC requirements.
- Privacy Knowledge: Understanding of North American privacy laws and international standards (GDPR).
- Technical Certifications: Required: CISM, CISA, or CISSP.
- Communication: Exceptional verbal and written command of English; ability to influence international stakeholders across different time zones.
- Mobility: Ability to travel occasionally (including international) to collaborate with global teams.
What can you expect from us in return?
Working at Kiwa North America means more than just managing security controls or a privacy policy; it’s about shaping the future of a global leader. We offer:
- High Visibility & Impact: An influential role where your work directly protects our reputation and regional growth.
- Global Exposure: Career growth opportunities within Kiwa North America and the SHV Group (60,000+ employees worldwide).
- Comprehensive Benefits: Competitive package including health insurance, 401(k), health/childcare savings accounts, and paid time off.
- Hybrid Flexibility: 3 days in-office / 2 days remote.