LogoFresh Jobs Ahead
Murphy-Hoffman Company (MHC Kenworth)
Murphy-Hoffman Company (MHC Kenworth)
1 001 – 5 000 Xodimlar
AvtomobilsozlikIshlab chiqarishSug‘urta
Murphy-Hoffman Company (MHC Kenworth) avtomobilsozlik va tijorat transporti sohalariga xizmat ko‘rsatuvchi og‘ir va o‘rta yuk avtomobillari dilerlik tarmog‘ini boshqaradi. Kompaniya Kenworth va Volvo yuk avtomobillarini sotish hamda ularga xizmat ko‘rsatish bilan birga, lizing, moliyalashtirish, ehtiyot qismlar va ta’mirlash bo‘yicha yordam ham taqdim etadi. 19 ta shtatda 130 dan ortiq manzilga ega bo‘lgan MHC mintaqaviy dilerlik faoliyatini yirik bozorlardagi kecha-kunduz xizmat ko‘rsatish imkoniyatlari bilan birlashtirib, mijozlarni transport vositalariga egalik qilish va ulardan foydalanishning barcha bosqichlarida qo‘llab-quvvatlaydi.
LinkedIn
Kompaniyadagi ish o‘rinlari

Director of Security and Compliance

Lead SOC 2, data governance, and AI risk for MHC’s AI-powered SaaS automation platform. Advise executives, auditors, and enterprise customers while building the security function.

USAmerika Qo‘shma ShtatlariMNMinnesotaMasofaviyTo‘liq stavkaYetakchiTalab Qilinadigan Til: inglizchaMuvofiqlik

Tavsif

  • Manage renewal and ongoing operation of the SOC 2 Type II report, serving as the audit firm’s main contact.
  • Strengthen internal controls and reduce manual evidence gathering.
  • Create, document, and operate controls aligned with SOC 2 Type II, HIPAA, PCI, and GDPR/CCPA.
  • Work with auditors to maintain ongoing compliance.
  • Expand the company’s attestations as needed.
  • Lead customer security reviews, questionnaires, and due diligence requests.
  • Maintain security policies, the risk register, and the incident response plan.
  • Conduct tabletop exercises.
  • Set standards for data classification, retention, and access control.
  • Work with engineering on least-privilege access, encryption, and data lifecycle management.
  • Create and implement secure software development lifecycle policies, along with environmental and physical security standards.
  • Manage vendor and third-party risk, including assessments of SaaS and AI tools.
  • Support Legal in negotiating security and data privacy terms in contracts.
  • Develop the company’s AI governance framework, covering acceptable use, model and vendor risk, and oversight of AI data handling.
  • Monitor emerging AI standards and turn them into practical controls.
  • Collaborate with product and engineering teams on responsible AI practices.
  • Advise on security and compliance risks from unauthorized AI use.
  • Counsel executives and the board on the company’s security and compliance posture.
  • Support Sales and Customer Success teams during enterprise deals.
  • Build the security and compliance function.

Talablar

  • Bachelor’s degree in computer science, information security, or a related field.
  • At least 6 years of experience in security, compliance, IT/GRC, or risk management.
  • At least 2 years managing a SOC 2 program day to day, including evidence gathering, control monitoring, and auditor coordination.
  • Hands-on experience operating and renewing an existing SOC 2 Type II program.
  • Working knowledge of data governance, including classification, retention, access reviews, and CCPA/GDPR.
  • Familiarity with AI governance concepts and frameworks such as NIST AI RMF, OWASP LLM Top 10, and ISO 42001.
  • Experience writing policies and configuring compliance automation tools.
  • Strong written and verbal communication skills.
  • Experience with compliance automation platforms such as Vanta, Drata, Secureframe, or similar tools.
  • Skills in vendor and third-party risk assessment and management.
  • Ability to build credibility with enterprise customers and prospects on security and trust.
  • Must be based in the United States.
  • Visa sponsorship is not available for this role.
  • Preferred: CISSP, CISM, CIPP, or CISA certification.
  • Preferred: Experience achieving or maintaining ISO 27001 or ISO 42001.

Imtiyozlar

  • Flexible work-from-anywhere model.
  • 401(k) plan with deferred and Roth options.
  • Employer match of 50%, up to 4.5% of gross pay.
  • Medical plans with copay or HSA options.
  • Dental and vision plans.
  • Daycare and medical FSA/HSA accounts.
  • $50,000 in group term life insurance coverage.
  • Generous paid time off.
  • Employee Assistance Program (EAP).
  • Additional life insurance.
  • Critical illness insurance.
  • Accident, cancer, and hospital indemnity insurance.
  • Legal and ID Shield services.
  • Pet insurance.
  • Paid family or medical leave where available through state programs.
  • Four weeks of paid paternity leave after one year of employment, with partial eligibility beginning at six months, in states without a state program.
  • Twelve weeks of paid leave for the birth parent, subject to eligibility rules.

O‘xshash ish o‘rinlari