User should not access the country assignments which were not given access

our client operates in multiple countries and employees have multiple assignments with legal employer different countries. all person security profiles for the roles are created at person level. many roles are created for different countries. currently employer wants user to access only the assignments with countries they have access to. Instead creating person security profiles again as this has major impact, can we achieve this