Murphy-Hoffman Company (MHC Kenworth)
Murphy-Hoffman Company (MHC Kenworth)
Murphy-Hoffman Company (MHC Kenworth) автомобиль және коммерциялық тасымалдау салаларына қызмет көрсететін ауыр және орташа жүк көліктері дилерлік желісін басқарады. Компания Kenworth және Volvo жүк көліктерін сату және оларға қызмет көрсетумен қатар, лизинг, қаржыландыру, қосалқы бөлшектер және жөндеу қолдауын ұсынады. 19 штаттағы 130-дан астам орналасу орны бар MHC аймақтық дилерлік операцияларды негізгі нарықтардағы тәулік бойы көрсетілетін қызметпен біріктіріп, көліктерді иелену және пайдалану кезеңінің барлық барысында клиенттерге қолдау көрсетеді.

Director of Security and Compliance

Lead SOC 2, data governance, and AI risk for MHC’s AI-powered SaaS automation platform. Advise executives, auditors, and enterprise customers while building the security function.

Сипаттама

  • Manage renewal and ongoing operation of the SOC 2 Type II report, serving as the audit firm’s main contact.
  • Strengthen internal controls and reduce manual evidence gathering.
  • Create, document, and operate controls aligned with SOC 2 Type II, HIPAA, PCI, and GDPR/CCPA.
  • Work with auditors to maintain ongoing compliance.
  • Expand the company’s attestations as needed.
  • Lead customer security reviews, questionnaires, and due diligence requests.
  • Maintain security policies, the risk register, and the incident response plan.
  • Conduct tabletop exercises.
  • Set standards for data classification, retention, and access control.
  • Work with engineering on least-privilege access, encryption, and data lifecycle management.
  • Create and implement secure software development lifecycle policies, along with environmental and physical security standards.
  • Manage vendor and third-party risk, including assessments of SaaS and AI tools.
  • Support Legal in negotiating security and data privacy terms in contracts.
  • Develop the company’s AI governance framework, covering acceptable use, model and vendor risk, and oversight of AI data handling.
  • Monitor emerging AI standards and turn them into practical controls.
  • Collaborate with product and engineering teams on responsible AI practices.
  • Advise on security and compliance risks from unauthorized AI use.
  • Counsel executives and the board on the company’s security and compliance posture.
  • Support Sales and Customer Success teams during enterprise deals.
  • Build the security and compliance function.

Талаптар

  • Bachelor’s degree in computer science, information security, or a related field.
  • At least 6 years of experience in security, compliance, IT/GRC, or risk management.
  • At least 2 years managing a SOC 2 program day to day, including evidence gathering, control monitoring, and auditor coordination.
  • Hands-on experience operating and renewing an existing SOC 2 Type II program.
  • Working knowledge of data governance, including classification, retention, access reviews, and CCPA/GDPR.
  • Familiarity with AI governance concepts and frameworks such as NIST AI RMF, OWASP LLM Top 10, and ISO 42001.
  • Experience writing policies and configuring compliance automation tools.
  • Strong written and verbal communication skills.
  • Experience with compliance automation platforms such as Vanta, Drata, Secureframe, or similar tools.
  • Skills in vendor and third-party risk assessment and management.
  • Ability to build credibility with enterprise customers and prospects on security and trust.
  • Must be based in the United States.
  • Visa sponsorship is not available for this role.
  • Preferred: CISSP, CISM, CIPP, or CISA certification.
  • Preferred: Experience achieving or maintaining ISO 27001 or ISO 42001.

Артықшылықтар

  • Flexible work-from-anywhere model.
  • 401(k) plan with deferred and Roth options.
  • Employer match of 50%, up to 4.5% of gross pay.
  • Medical plans with copay or HSA options.
  • Dental and vision plans.
  • Daycare and medical FSA/HSA accounts.
  • $50,000 in group term life insurance coverage.
  • Generous paid time off.
  • Employee Assistance Program (EAP).
  • Additional life insurance.
  • Critical illness insurance.
  • Accident, cancer, and hospital indemnity insurance.
  • Legal and ID Shield services.
  • Pet insurance.
  • Paid family or medical leave where available through state programs.
  • Four weeks of paid paternity leave after one year of employment, with partial eligibility beginning at six months, in states without a state program.
  • Twelve weeks of paid leave for the birth parent, subject to eligibility rules.

Ұқсас жұмыс орындары

Cornbread Hemp®

Senior National Key Account Manager, Beverage Sales

Cornbread Hemp®

Lead national retail growth for Cornbread Hemp’s THC seltzers and functional wellness beverages. Build buyer relationships and expand authorizations, distribution, and account performance.

Ашу
SupportYourApp

Senior T3 Support Engineer (Remote, Brazil)

SupportYourApp
1 001 – 5 000 Қызметкерлер
КонсалтингЛогистикаМаркетинг

Investigate backend, database, API, and integration issues for SupportYourApp’s global clients. Resolve technical incidents remotely and escalate complex cases to Engineering.

Ашу
Incluso

Power BI Business Analyst

Incluso

Support Power BI reporting operations for a company in Stockholm, managing monthly refreshes, troubleshooting, data validation, and ad hoc stakeholder requests.

Ашу
Hewlett Packard Enterprise

Senior Presales Systems Engineer, HPE Networking

Hewlett Packard Enterprise

Design and demonstrate HPE, Aruba, and Juniper networking solutions for Oregon K–12 and local government customers. Develop architectures, proposals, and proofs of concept to support customer needs.

Ашу
12th Tribe

Director of Ecommerce and Customer Experience

12th Tribe

Lead 12th Tribe’s Shopify commerce, site merchandising, and customer service operations. Connect digital channels, marketing, loyalty, and affiliate programs to grow revenue.

Ашу
EHC

Performance Marketing Specialist — Birmingham, Alabama

EHC

Manage marketing performance reporting, data quality, and campaign tracking for Encompass Health’s nationwide inpatient rehabilitation operations. This full-time role is based at the home office in Birmingham, Alabama.

Ашу
Terracon

Project Engineer, Trenchless Services

Terracon
5 001 – 10 000 Қызметкерлер
ҒылымКонсалтингҚұрылыс

Lead trenchless engineering and construction consulting at Terracon, an employee-owned multidisciplinary firm. Support critical underground utility and water infrastructure projects across Midwest offices.

Ашу
Alten México

Senior Automotive Electronics Engineer

Alten México

Investigate field failures and warranty returns involving automotive electronic control units (ECUs). Use root cause analysis, fault tree analysis, laboratory testing, and vehicle communication protocols to improve system reliability.

Ашу
Zaden Technologies

VMware vSphere Virtualization Engineer

Zaden Technologies

Operate VMware vSphere infrastructure for a Defense Health Agency program in Chantilly, Virginia. Help consolidate more than 2,000 virtual machines across disconnected DoD enclaves.

Ашу
AVENIR COLLECTIVE

Wholesale Executive – Australia (Remote)

AVENIR COLLECTIVE

Support retail account performance, product launches and trade marketing across Avenir Collective’s beauty, personal care and lifestyle brands. This full-time role is based remotely in Australia.

Ашу