National Manager, Information Security

Select how often (in days) to receive an alert:

At Kia, we’re creating award-winning products and redefining what value means in the automotive industry. It takes a special group of individuals to do what we do, and we do it together. Our culture is fast-paced, collaborative, and innovative. Our people thrive on thinking differently and challenging the status quo. We are creating something special here, a culture of learning and opportunity, where you can help Kia achieve big things and most importantly, feel passionate and connected to your work every day.

Kia provides team members with competitive benefits including premium paid medical, dental and vision coverage for you and your dependents, 401(k) plan matching of 100% up to 6% of the salary deferral, and paid time off. Kia also offers company lease and purchase programs, company-wide holiday shutdown, paid volunteer hours, and premium lifestyle amenities at our corporate campus in Irvine, California.
Status

Exempt

The Manager, Information Security is responsible for leading the Governance, Risk, Compliance (GRC), Cyber Resilience, Security Awareness, and Security Program Management activities across Kia North America.

This role serves as the operational leader for enterprise cybersecurity governance and security program execution, ensuring alignment with Kia Global Security standards, regulatory requirements, and business objectives.

The position partners closely with information security teams, business leaders, internal audit, legal, compliance organizations, and external service providers to maintain a strong cybersecurity posture across Kia America, Kia Canada, Kia Georgia, and Kia Mexico.

The role reports to the Head of Information Security and acts as a key leader in driving security maturity, risk reduction, compliance readiness, and cyber resilience initiatives across the region.

This position also provides leadership in information security governance including overseeing all responses to information security audits, managing the security risk management program, advising the Information Security Management Committee (ISMC), ensuring Kia America retains its ISO
27001 certification, and representing Kia NA’s interests in global security policy discussions.

Priority 1 - 25%

• Lead and manage the North America Information Security Governance Program.
• Maintain Information Security policies, standards, procedures, and guidelines.
• Manage the Information Security Management System (ISMS).
• Coordinate Information Security Management Committee (ISMC) activities.
• Ensure ongoing ISO
  27001 certification readiness.
• Manage internal and external security audit activities.
• Coordinate remediation of audit findings.
• Monitor regulatory and compliance requirements impacting cybersecurity programs.

Priority 2 - 20%

• Own and maintain the enterprise cybersecurity risk management program.
• Facilitate periodic risk assessments and risk treatment planning.
• Maintain and report on the enterprise Risk Register.
• Manage security exception and risk acceptance processes.
• Establish and oversee Third-Party Risk Management (TPRM) activities.
• Assess cybersecurity risks associated with vendors, suppliers, and business partners.
• Track remediation of identified third-party security risks.

Priority 3 - 25%

• Develop and manage the Cyber Resilience Program.
• Coordinate cyber incident response simulations and readiness assessments.
• Support business continuity and disaster recovery testing.
• Track lessons learned and remediation activities from exercises and incidents.
• Partner with HAEA and business units to improve cyber readiness.

Priority 4 - 20%

• Lead execution of strategic cybersecurity initiatives.
• Coordinate North America Information Security…