LogoFresh Jobs Ahead
Murphy-Hoffman Company (MHC Kenworth)
Murphy-Hoffman Company (MHC Kenworth)
1,001 – 5,000 Employees
AutomotiveInsuranceManufacturing
Murphy-Hoffman Company (MHC Kenworth) operates a heavy-duty and medium-duty truck dealership network serving the automotive and commercial transportation sectors. The company sells and services Kenworth and Volvo trucks, while also providing leasing, financing, parts, and repair support. With more than 130 locations across 19 states, MHC combines regional dealership operations with round-the-clock service in major markets, supporting customers throughout the ownership and operating lifecycle of their vehicles.
LinkedIn
Company Jobs

Director of Security and Compliance

Lead SOC 2, data governance, and AI risk for MHC’s AI-powered SaaS automation platform. Advise executives, auditors, and enterprise customers while building the security function.

USUnited StatesMNMinnesotaRemoteFull-timeLeadEnglish RequiredCompliance

Description

  • Manage renewal and ongoing operation of the SOC 2 Type II report, serving as the audit firm’s main contact.
  • Strengthen internal controls and reduce manual evidence gathering.
  • Create, document, and operate controls aligned with SOC 2 Type II, HIPAA, PCI, and GDPR/CCPA.
  • Work with auditors to maintain ongoing compliance.
  • Expand the company’s attestations as needed.
  • Lead customer security reviews, questionnaires, and due diligence requests.
  • Maintain security policies, the risk register, and the incident response plan.
  • Conduct tabletop exercises.
  • Set standards for data classification, retention, and access control.
  • Work with engineering on least-privilege access, encryption, and data lifecycle management.
  • Create and implement secure software development lifecycle policies, along with environmental and physical security standards.
  • Manage vendor and third-party risk, including assessments of SaaS and AI tools.
  • Support Legal in negotiating security and data privacy terms in contracts.
  • Develop the company’s AI governance framework, covering acceptable use, model and vendor risk, and oversight of AI data handling.
  • Monitor emerging AI standards and turn them into practical controls.
  • Collaborate with product and engineering teams on responsible AI practices.
  • Advise on security and compliance risks from unauthorized AI use.
  • Counsel executives and the board on the company’s security and compliance posture.
  • Support Sales and Customer Success teams during enterprise deals.
  • Build the security and compliance function.

Requirements

  • Bachelor’s degree in computer science, information security, or a related field.
  • At least 6 years of experience in security, compliance, IT/GRC, or risk management.
  • At least 2 years managing a SOC 2 program day to day, including evidence gathering, control monitoring, and auditor coordination.
  • Hands-on experience operating and renewing an existing SOC 2 Type II program.
  • Working knowledge of data governance, including classification, retention, access reviews, and CCPA/GDPR.
  • Familiarity with AI governance concepts and frameworks such as NIST AI RMF, OWASP LLM Top 10, and ISO 42001.
  • Experience writing policies and configuring compliance automation tools.
  • Strong written and verbal communication skills.
  • Experience with compliance automation platforms such as Vanta, Drata, Secureframe, or similar tools.
  • Skills in vendor and third-party risk assessment and management.
  • Ability to build credibility with enterprise customers and prospects on security and trust.
  • Must be based in the United States.
  • Visa sponsorship is not available for this role.
  • Preferred: CISSP, CISM, CIPP, or CISA certification.
  • Preferred: Experience achieving or maintaining ISO 27001 or ISO 42001.

Benefits

  • Flexible work-from-anywhere model.
  • 401(k) plan with deferred and Roth options.
  • Employer match of 50%, up to 4.5% of gross pay.
  • Medical plans with copay or HSA options.
  • Dental and vision plans.
  • Daycare and medical FSA/HSA accounts.
  • $50,000 in group term life insurance coverage.
  • Generous paid time off.
  • Employee Assistance Program (EAP).
  • Additional life insurance.
  • Critical illness insurance.
  • Accident, cancer, and hospital indemnity insurance.
  • Legal and ID Shield services.
  • Pet insurance.
  • Paid family or medical leave where available through state programs.
  • Four weeks of paid paternity leave after one year of employment, with partial eligibility beginning at six months, in states without a state program.
  • Twelve weeks of paid leave for the birth parent, subject to eligibility rules.

Related Jobs

Carrier Commercial Refrigeration

Service Dispatcher, Technical Support — Carrier Commercial Refrigeration (Serbia, On-site)

Carrier Commercial Refrigeration
1,001 – 5,000 Employees
Food & BeverageHealthcareLogistics
RSSerbiaOn-siteFull-timeJuniorMiddleNo degree requiredEnglish RequiredSupport Engineer

Coordinate equipment service and technical support for Carrier Commercial Refrigeration customers in Serbia. The role combines on-site equipment work, customer inquiries, service documentation, troubleshooting, and escalation.

Open