Security & Privacy Compliance Manager (KTC/KNA)

Kubota Tractor Corporation; United States; On-site; USD 110,000 - 170,000; Full time

Job summary

Kubota Tractor Corporation is seeking an Information Security & Compliance professional in the United States to promote and enforce compliance with state and federal laws affecting Kubota and Kubota North America. You will oversee privacy, security, audits, and incident analysis while coordinating with Legal, Compliance, and IT leadership.

The role emphasizes leadership, policy development, and effective communication to ensure organization-wide adherence to security and privacy standards and to

Qualifications

• Bachelor's Degree in computers preferred or 7+ years information security experience.
• Minimum of one security-specific industry certification required.
• At least 2 years’ experience with captive financial institutions preferred.
• Deep knowledge of federal and state information security, cybersecurity and privacy laws.

Responsibilities

• Maintain knowledge of regulatory and compliance issues related to information security and privacy.
• Develop and maintain information security and privacy policies with IS, Compliance, Legal, and management.
• Implement and monitor information security policies with emphasis on best security practices.
• Analyze incidents from SIEM/IDS/IPS and report trends.
• Coordinate quarterly Executive Security and Privacy Steering Committee meetings.

Skills

Information Security

Data Privacy

Regulatory Compliance

Auditing

Investigation

Education

Bachelor's Degree in Computers

High School Diploma or GED

Tools

SAP ECC 6.0

Job description

Job Overview

This individual contributor position is responsibile to promote and enforce compliance with state/federal laws and regulations affecting Kubota Tractor Corporation and Kubota North America (KTC/KNA).

For Earth For Life

Job Overview

This individual contributor position is responsibile to promote and enforce compliance with state/federal laws and regulations affecting Kubota Tractor Corporation and Kubota North America (KTC/KNA). Responsibilities include auditing, investigating, training/education and enforcement, ongoing consultation on compliance issues impacting businesses, monitoring and reporting on adherence to compliance controls helping businesses to implement compliance controls. The position provides thought leadership and is responsible for KTC/KNA Information Security and Data Privacy program compliance and activities to help maintain the confidentiality, integrity and availability of the organization’s critical technology infrastructure and information.

Key Responsibilities

This position does the following in accordance with all applicable Federal, State and local laws / regulations and the Company’s policies, procedures and guidelines:

• Maintains current knowledge of applicable regulatory and compliance issues related to Information Security and Data Privacy. Applies this knowledge to plan, develop, document, maintain, monitor, and report on adherence to regulatory and compliance requirements.
• In association with the Information Systems Department (IS), Compliance Department (Compliance), Office of the General Counsel (Legal), and company management, maintains information security, cybersecurity and privacy policies and procedures for the Company.
• Implements and monitors the Company's information security, cybersecurity and privacy policies and procedures with special attention paid to following good/best security practices.
• Conducts analysis and trending of incidents/events detected from SIEM, IDS/IPS, and other security applications.
• Understands the threat landscape and attack trends as they relate to intelligence gathering, dissemination and defense coordination.
• Coordinates and executes quarterly Executive Security and Privacy Steering Committee meetings.
• Facilitates monthly Security and Privacy Working Group meetings.
• Tracks and reports on business-relevant metrics to measure the efficiency and effectiveness of the Information Security and Privacy Programs.
• Solicit for appropriate resources to increase the maturity of the security and privacy programs.
• Builds strong relationship with business leaders, Human Resources, and Legal to ensure connectivity to the business.
• Maintains confidentiality of sensitive investigative information.
• Consults and provides security and privacy insight for new computing system designs or upgrades
• Understands effective communication across all levels of the organization with the appropriate message, the right tone and the appropriate level of impact and can make the complex seem less complex, is a consensus builder and brings people together.
• Maintains the perseverance to drive and sustain continuous improvement, while being resilient and flexible.
• Maintains security policies and standards.
• Operates in an ethical manner demonstrating integrity and good character.
• Partners with Vendor Management to ensure contracts and agreements are in line with security and privacy obligations.
• Other duties as assigned.

Qualifications

• High School Diploma or GED required.
• Bachelor’s Degree-secondary education in computers preferred:
• In lieu of a degree at least 7 years of information security experience required.
• Certification Required: A minimum of one security specific industry certification is required.
• At least 2 years’ experience working for captive financial institutions preferred.
• Deep working knowledge of federal and state information security, cybersecurity and privacy laws, as well as customary contractual requirements.
• Strong understanding of information security principles, architecture and methodologies (including risk assessment and audit methodologies). Proven experience developing security, data privacy and information risk assessment programs.
• Proficiency in information security & privacy frameworks (such as NIST CSF and NIST Privacy Framework).
• Previous experience assessing user role-based security controls in an SAP ECC 6.0 ERP environment, and with underlying SAP data structures PHYSICAL
• Uses effective oral and written communication skills; delivers information in a clear and concise manner, listens and communicates effectively with others.

Physical Requirements

• Requires sufficient personal mobility and physical reflexes, to permit the employee to function in a general office environment and accomplish tasks and duties as outlined above.

Disclaimer

The information provided in the description has been designed to indicate the general nature and level of work performed by incumbents within the classification. This description is not intended to be a comprehensive inventory of all duties, responsibilities, qualifications and working conditions required of employees assigned to this job/classification. This job is intended to include the current essential functions of the job. Management reserves the right to add or modify the duties and responsibilities and to designate other functions as essential at any time.

Kubota is an equal opportunity at will employer and does not discriminate against any employee or applicant for employment because of age, race, religion, color, disability, sex, sexual orientation or national origin.