Security & Privacy Compliance Manager (KTC/KNA)

Kubota•Grapevine, TX

1d•Onsite

About The Position

This individual contributor position is responsible for promoting and enforcing compliance with state/federal laws and regulations affecting Kubota Tractor Corporation and Kubota North America (KTC/KNA). Responsibilities include auditing, investigating, training/education and enforcement, ongoing consultation on compliance issues impacting businesses, monitoring and reporting on adherence to compliance controls, and helping businesses to implement compliance controls. The position provides thought leadership and is responsible for KTC/KNA Information Security and Data Privacy program compliance and activities to help maintain the confidentiality, integrity, and availability of the organization’s critical technology infrastructure and information.

Requirements

High School Diploma or GED required.
Bachelor’s Degree-secondary education in computers preferred:
In lieu of a degree at least 7 years of information security experience required.
Certification Required: A minimum of one security specific industry certification is required.
At least 2 years’ experience working for captive financial institutions preferred.
Deep working knowledge of federal and state information security, cybersecurity and privacy laws, as well as customary contractual requirements.
Strong understanding of information security principles, architecture and methodologies (including risk assessment and audit methodologies).
Proven experience developing security, data privacy and information risk assessment programs.
Proficiency in information security & privacy frameworks (such as NIST CSF and NIST Privacy Framework).
Previous experience assessing user role-based security controls in an SAP ECC 6.0 ERP environment, and with underlying SAP data structures.
Uses effective oral and written communication skills; delivers information in a clear and concise manner, listens and communicates effectively with others.

Nice To Haves

Bachelor’s Degree-secondary education in computers preferred
At least 2 years’ experience working for captive financial institutions preferred.

Responsibilities

Maintains current knowledge of applicable regulatory and compliance issues related to Information Security and Data Privacy. Applies this knowledge to plan, develop, document, maintain, monitor, and report on adherence to regulatory and compliance requirements.
In association with the Information Systems Department (IS), Compliance Department (Compliance), Office of the General Counsel (Legal), and company management, maintains information security, cybersecurity and privacy policies and procedures for the Company.
Implements and monitors the Company's information security, cybersecurity and privacy policies and procedures with special attention paid to following good/best security practices.
Conducts analysis and trending of incidents/events detected from SIEM, IDS/IPS, and other security applications.
Understands the threat landscape and attack trends as they relate to intelligence gathering, dissemination and defense coordination.
Coordinates and executes quarterly Executive Security and Privacy Steering Committee meetings.
Facilitates monthly Security and Privacy Working Group meetings.
Tracks and reports on business-relevant metrics to measure the efficiency and effectiveness of the Information Security and Privacy Programs.
Solicit for appropriate resources to increase the maturity of the security and privacy programs.
Builds strong relationship with business leaders, Human Resources, and Legal to ensure connectivity to the business.
Maintains confidentiality of sensitive investigative information.
Consults and provides security and privacy insight for new computing system designs or upgrades.
Understands effective communication across all levels of the organization with the appropriate message, the right tone and the appropriate level of impact and can make the complex seem less complex, is a consensus builder and brings people together.
Maintains the perseverance to drive and sustain continuous improvement, while being resilient and flexible.
Maintains security policies and standards.
Operates in an ethical manner demonstrating integrity and good character.
Partners with Vendor Management to ensure contracts and agreements are in line with security and privacy obligations.
Other duties as assigned.