Murphy-Hoffman Company (MHC Kenworth)
Murphy-Hoffman Company (MHC Kenworth)
1001 – 5000 Darbinieki
ApdrošināšanaAutobūveRažošana
Murphy-Hoffman Company (MHC Kenworth) pārvalda lieljaudas un vidējas noslodzes kravas automašīnu izplatītāju tīklu, kas apkalpo autobūves un komerciālo pārvadājumu nozares. Uzņēmums pārdod un apkalpo Kenworth un Volvo kravas automašīnas, kā arī nodrošina līzinga, finansēšanas, rezerves daļu un remonta pakalpojumus. Ar vairāk nekā 130 atrašanās vietām 19 štatos MHC apvieno reģionālo izplatītāju darbību ar diennakts servisu nozīmīgākajos tirgos, atbalstot klientus visā transportlīdzekļu īpašumtiesību un ekspluatācijas ciklā.

Director of Security and Compliance

Lead SOC 2, data governance, and AI risk for MHC’s AI-powered SaaS automation platform. Advise executives, auditors, and enterprise customers while building the security function.

Apraksts

  • Manage renewal and ongoing operation of the SOC 2 Type II report, serving as the audit firm’s main contact.
  • Strengthen internal controls and reduce manual evidence gathering.
  • Create, document, and operate controls aligned with SOC 2 Type II, HIPAA, PCI, and GDPR/CCPA.
  • Work with auditors to maintain ongoing compliance.
  • Expand the company’s attestations as needed.
  • Lead customer security reviews, questionnaires, and due diligence requests.
  • Maintain security policies, the risk register, and the incident response plan.
  • Conduct tabletop exercises.
  • Set standards for data classification, retention, and access control.
  • Work with engineering on least-privilege access, encryption, and data lifecycle management.
  • Create and implement secure software development lifecycle policies, along with environmental and physical security standards.
  • Manage vendor and third-party risk, including assessments of SaaS and AI tools.
  • Support Legal in negotiating security and data privacy terms in contracts.
  • Develop the company’s AI governance framework, covering acceptable use, model and vendor risk, and oversight of AI data handling.
  • Monitor emerging AI standards and turn them into practical controls.
  • Collaborate with product and engineering teams on responsible AI practices.
  • Advise on security and compliance risks from unauthorized AI use.
  • Counsel executives and the board on the company’s security and compliance posture.
  • Support Sales and Customer Success teams during enterprise deals.
  • Build the security and compliance function.

Prasības

  • Bachelor’s degree in computer science, information security, or a related field.
  • At least 6 years of experience in security, compliance, IT/GRC, or risk management.
  • At least 2 years managing a SOC 2 program day to day, including evidence gathering, control monitoring, and auditor coordination.
  • Hands-on experience operating and renewing an existing SOC 2 Type II program.
  • Working knowledge of data governance, including classification, retention, access reviews, and CCPA/GDPR.
  • Familiarity with AI governance concepts and frameworks such as NIST AI RMF, OWASP LLM Top 10, and ISO 42001.
  • Experience writing policies and configuring compliance automation tools.
  • Strong written and verbal communication skills.
  • Experience with compliance automation platforms such as Vanta, Drata, Secureframe, or similar tools.
  • Skills in vendor and third-party risk assessment and management.
  • Ability to build credibility with enterprise customers and prospects on security and trust.
  • Must be based in the United States.
  • Visa sponsorship is not available for this role.
  • Preferred: CISSP, CISM, CIPP, or CISA certification.
  • Preferred: Experience achieving or maintaining ISO 27001 or ISO 42001.

Priekšrocības

  • Flexible work-from-anywhere model.
  • 401(k) plan with deferred and Roth options.
  • Employer match of 50%, up to 4.5% of gross pay.
  • Medical plans with copay or HSA options.
  • Dental and vision plans.
  • Daycare and medical FSA/HSA accounts.
  • $50,000 in group term life insurance coverage.
  • Generous paid time off.
  • Employee Assistance Program (EAP).
  • Additional life insurance.
  • Critical illness insurance.
  • Accident, cancer, and hospital indemnity insurance.
  • Legal and ID Shield services.
  • Pet insurance.
  • Paid family or medical leave where available through state programs.
  • Four weeks of paid paternity leave after one year of employment, with partial eligibility beginning at six months, in states without a state program.
  • Twelve weeks of paid leave for the birth parent, subject to eligibility rules.

Saistītās vakances

Thermo Fisher Scientific

Clarity PPM Applications Administrator – Thermo Fisher Scientific, Remote India

Thermo Fisher Scientific

Administer Clarity PPM and provide Level 2 support, monitoring, access management, testing, and deployments. Support enterprise application operations across India and the Philippines.

Atvērt
Avantor

Operations Coordinator – Laboratory Inventory and Shipping

Avantor

Coordinate laboratory inventory, purchasing, shipping, and customer service for Avantor’s scientific customers. The role also supports hazardous materials shipments, reporting, and inventory systems.

Atvērt
Intact

Property Claims Adjuster II – Intact, Mississauga

Intact

Investigate and settle residential, condominium, and commercial property claims for Intact customers across Canada. Deliver empathetic support through digital and phone channels.

Atvērt
Endless Studios

Game Design Curriculum Developer (Unity)

Endless Studios

Develop game design lessons for Florida high school career and technical education programs using Endless Studios’ Endstar engine. Create Unity bridge lessons, assessments, teacher guides, and classroom tutorials.

Atvērt
Nivoda

Senior AI/ML Engineer, Remote in the United States

Nivoda

Develop ranking, recommendation, and multimodal search systems for Nivoda’s global jewellery marketplace and jeweller storefronts. Build production machine learning capabilities across search, product discovery, and image matching.

Atvērt