Murphy-Hoffman Company (MHC Kenworth)
Murphy-Hoffman Company (MHC Kenworth)
1 001 – 5 000 Darbuotojai
Automobilių pramonėDraudimasGamyba
„Murphy-Hoffman Company“ (MHC Kenworth) valdo sunkiųjų ir vidutinio sunkumo sunkvežimių prekybos atstovybių tinklą, aptarnaujantį automobilių ir komercinio transporto sektorius. Įmonė parduoda ir aptarnauja „Kenworth“ bei „Volvo“ sunkvežimius, taip pat teikia lizingo, finansavimo, atsarginių dalių ir remonto paslaugas. Daugiau nei 130 vietų 19 valstijų turinti MHC derina regioninių prekybos atstovybių veiklą su visą parą teikiamu aptarnavimu pagrindinėse rinkose ir padeda klientams visą transporto priemonių naudojimo bei eksploatavimo laikotarpį.

Director of Security and Compliance

Lead SOC 2, data governance, and AI risk for MHC’s AI-powered SaaS automation platform. Advise executives, auditors, and enterprise customers while building the security function.

Aprašymas

  • Manage renewal and ongoing operation of the SOC 2 Type II report, serving as the audit firm’s main contact.
  • Strengthen internal controls and reduce manual evidence gathering.
  • Create, document, and operate controls aligned with SOC 2 Type II, HIPAA, PCI, and GDPR/CCPA.
  • Work with auditors to maintain ongoing compliance.
  • Expand the company’s attestations as needed.
  • Lead customer security reviews, questionnaires, and due diligence requests.
  • Maintain security policies, the risk register, and the incident response plan.
  • Conduct tabletop exercises.
  • Set standards for data classification, retention, and access control.
  • Work with engineering on least-privilege access, encryption, and data lifecycle management.
  • Create and implement secure software development lifecycle policies, along with environmental and physical security standards.
  • Manage vendor and third-party risk, including assessments of SaaS and AI tools.
  • Support Legal in negotiating security and data privacy terms in contracts.
  • Develop the company’s AI governance framework, covering acceptable use, model and vendor risk, and oversight of AI data handling.
  • Monitor emerging AI standards and turn them into practical controls.
  • Collaborate with product and engineering teams on responsible AI practices.
  • Advise on security and compliance risks from unauthorized AI use.
  • Counsel executives and the board on the company’s security and compliance posture.
  • Support Sales and Customer Success teams during enterprise deals.
  • Build the security and compliance function.

Reikalavimai

  • Bachelor’s degree in computer science, information security, or a related field.
  • At least 6 years of experience in security, compliance, IT/GRC, or risk management.
  • At least 2 years managing a SOC 2 program day to day, including evidence gathering, control monitoring, and auditor coordination.
  • Hands-on experience operating and renewing an existing SOC 2 Type II program.
  • Working knowledge of data governance, including classification, retention, access reviews, and CCPA/GDPR.
  • Familiarity with AI governance concepts and frameworks such as NIST AI RMF, OWASP LLM Top 10, and ISO 42001.
  • Experience writing policies and configuring compliance automation tools.
  • Strong written and verbal communication skills.
  • Experience with compliance automation platforms such as Vanta, Drata, Secureframe, or similar tools.
  • Skills in vendor and third-party risk assessment and management.
  • Ability to build credibility with enterprise customers and prospects on security and trust.
  • Must be based in the United States.
  • Visa sponsorship is not available for this role.
  • Preferred: CISSP, CISM, CIPP, or CISA certification.
  • Preferred: Experience achieving or maintaining ISO 27001 or ISO 42001.

Privalumai

  • Flexible work-from-anywhere model.
  • 401(k) plan with deferred and Roth options.
  • Employer match of 50%, up to 4.5% of gross pay.
  • Medical plans with copay or HSA options.
  • Dental and vision plans.
  • Daycare and medical FSA/HSA accounts.
  • $50,000 in group term life insurance coverage.
  • Generous paid time off.
  • Employee Assistance Program (EAP).
  • Additional life insurance.
  • Critical illness insurance.
  • Accident, cancer, and hospital indemnity insurance.
  • Legal and ID Shield services.
  • Pet insurance.
  • Paid family or medical leave where available through state programs.
  • Four weeks of paid paternity leave after one year of employment, with partial eligibility beginning at six months, in states without a state program.
  • Twelve weeks of paid leave for the birth parent, subject to eligibility rules.

Susiję darbai

Cabot Corporation

Customer Care Representative – Riga, Hybrid

Cabot Corporation
1 001 – 5 000 Darbuotojai
H1B vizos rėmėjasB2BGamybaMokslas

Manage customer orders from intake through delivery at Cabot Corporation, a global specialty chemicals business. Coordinate shipments, resolve order issues, and support customer satisfaction as part of the hybrid Riga team.

Atidaryti
East Sussex County Council

Property Solicitor – East Sussex County Council (Hybrid, Lewes)

East Sussex County Council

Advise East Sussex County Council on property law and manage a varied caseload, including complex matters. Work with legal colleagues, council departments and councillors, while supporting less experienced staff.

Atidaryti