HI @abr86,
You can certainly do this using ACS organizational unit.
The Adobe Campaign Standard security model permits users assigned to a specific organizational unit to operate on objects (workflows/templates, etc.) and profiles associated with that OrgUnit, the parent OrgUnit (read-only on profiles), all child OrgUnit's and any directly linked to those children, i.e. recursively through the hierarchy. Users cannot view profiles or objects associated with sibling OrgUnit's. For example, a user assigned to the "US" OrgUnit has access to objects assigned to the "NA"OrgUnit and any at the "All"OrgUnit; however, they could not access anything assigned to the "CA"OrgUnit. A user assigned to the "NA" OrgUnit would be able to access objects at the "All"OrgUnit, and both "US" and "CA"OrgUnit's, but would not be able to access anything in "EMEA" (or their children).

Thanks!