Security & Privacy Compliance Manager (KTC/KNA)

JOB OVERVIEW

This individual contributor position is responsibile to promote and enforce compliance with state/federal laws and regulations affecting Kubota Tractor Corporation and Kubota North America (KTC/KNA).

Responsibilities include auditing, investigating, training/education and enforcement, ongoing consultation on compliance issues impacting businesses, monitoring and reporting on adherence to compliance controls helping businesses to implement compliance controls. 

The position provides thought leadership and is responsible for KTC/KNA Information Security and Data Privacy program compliance and activities to help maintain the confidentiality, integrity and availability of the organization’s critical technology infrastructure and information.

KEY RESPONSIBILITIES

This position does the following in accordance with all applicable Federal, State and local laws / regulations and the Company’s policies, procedures and guidelines:

• Maintains current knowledge of applicable regulatory and compliance issues related to Information Security and Data Privacy. Applies this knowledge to plan, develop, document, maintain, monitor, and report on adherence to regulatory and compliance requirements.
• In association with the Information Systems Department (IS), Compliance Department (Compliance), Office of the General Counsel (Legal), and company management, maintains information security, cybersecurity and privacy policies and procedures for the Company.
• Implements and monitors the Company's information security, cybersecurity and privacy policies and procedures with special attention paid to following good/best security practices.
• Conducts analysis and trending of incidents/events detected from SIEM, IDS/IPS, and other security applications.
• Understands the threat landscape and attack trends as they relate to intelligence gathering, dissemination and defense coordination.
• Coordinates and executes quarterly Executive Security and Privacy Steering Committee meetings.
• Facilitates monthly Security and Privacy Working Group meetings.
• Tracks and reports on business-relevant metrics to measure the efficiency and effectiveness of the Information Security and Privacy Programs.
• Solicit for appropriate resources to increase the maturity of the security and privacy programs.
• Builds strong relationship with business leaders, Human Resources, and Legal to ensure connectivity to the business.
• Maintains confidentiality of sensitive investigative information.
• Consults and provides security and privacy insight for new computing system designs or upgrades
• Understands effective communication across all levels of the organization with the appropriate message, the right tone and the appropriate level of impact and can make the complex seem less complex, is a consensus builder and brings people together.
• Maintains the perseverance to drive and sustain continuous improvement, while being resilient and flexible.
• Maintains security policies and standards.
• Operates in an ethical manner demonstrating integrity and good character.
• Partners with Vendor Management to ensure contracts and agreements are in line with security and privacy obligations.
• Other duties as assigned.

QUALIFICATIONS

• High School Diploma or GED required.
• Bachelor’s Degree-secondary education in computers preferred:
• In lieu of a degree at least 7 years of information security experience required.
• Certification Required: A minimum of one security specific industry certification is required.
• At least 2 years’ experience working for captive financial institutions preferred.
• Deep working knowledge of federal and state information security, cybersecurity and privacy laws, as well as customary contractual requirements.
• Strong understanding of information security principles, architecture and methodologies (including risk assessment and audit methodologies). Proven experience developing security, data privacy and information risk assessment programs.
• Proficiency in information security & privacy frameworks (such as NIST CSF and NIST Privacy Framework).
• Previous experience assessing user role-based security controls in an SAP ECC 6.0 ERP environment, and with underlying SAP data structures PHYSICAL
• Uses effective oral and written communication skills; delivers information in a clear and concise manner, listens and communicates effectively with others.

PHYSICAL REQUIREMENTS

• Requires sufficient personal mobility and physical reflexes, to permit the employee to function in a general office environment and accomplish tasks and duties as outlined above.

DISCLAIMER:

The information provided in the description has been designed to indicate the general nature and level of work performed by incumbents within the classification.  This description is not intended to be a comprehensive inventory of all duties, responsibilities, qualifications and working conditions required of employees assigned to this job/classification.  This job is intended to include the current essential functions of the job.  Management reserves the right to add or modify the duties and responsibilities and to designate other functions as essential at any time.