Analyst II, Cybersecurity- Information Risk Management

CarMax
Richmond
Workplace: OnsiteFull timeUSD 78,800 - 118,200 annuallyFunction: CybersecurityExperience: 2+ yearsEducation: bachelorsSkills: ["Detail-oriented","Analytical approach","Communication","Collaboration","Ownership"]

Work as an Analyst II in CarMax’s Information Security organization to plan and execute privacy risk and operations initiatives. You’ll support data privacy request handling (including DSARs), manage privacy operations and SLAs with KPI reporting, and streamline processes through automation and AI. The role also includes facilitating privacy impact assessments, maintaining privacy/policy governance lifecycles, documenting knowledge, and partnering with business, core privacy, technology, and application development teams.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
CarMax
CarMax
2 months ago

Analyst II, Cybersecurity- Information Risk Management

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 20 hours agoStatus: Live

Job Summary

Work as an Analyst II in CarMax’s Information Security organization to plan and execute privacy risk and operations initiatives. You’ll support data privacy request handling (including DSARs), manage privacy operations and SLAs with KPI reporting, and streamline processes through automation and AI. The role also includes facilitating privacy impact assessments, maintaining privacy/policy governance lifecycles, documenting knowledge, and partnering with business, core privacy, technology, and application development teams.
Location: Richmond
Workplace: Onsite
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Coordinate with technology teams to capture, assess, and process data subject access requests (DSAR) accurately and timely.
  • •Run privacy operations using service delivery principles, including executing services, maintaining backlogs, and meeting SLAs with KPI reporting to stakeholders.
  • •Identify and implement privacy risk management process improvements using process analysis, automation, and AI.
  • •Administer privacy and information security-focused platforms, perform daily operational system improvements, and facilitate privacy technology administration.
  • •Facilitate privacy impact assessments and own policy governance lifecycle management, ensuring policies and job aids remain current and available.

Pay and Benefits

Salary: USD 78,800 - 118,200 annually
Equity and Bonus:Equity
Perks:Paid SickPaid LeavePaid HolidaysHoliday Premium

Key Requirements

  • •Bachelor’s degree in business, computer science, or information systems (or related).
  • •2+ years of experience in privacy, technology compliance, IT audit, cybersecurity, or related fields.
  • •Privacy-focused certifications such as CIPP, CIPM, CIPT, CIA, CRSC, or CISA.
  • •Familiarity with U.S. legal frameworks and privacy regulations including CCPA, GLBA, PCI, NYDFS, and CFPB.
  • •Detail-oriented with strong analytical, communication, and customer-focused operating skills.
Experience:2+ yearsPrivacyTechnology complianceIT auditCybersecurityData privacyRisk management
Education:Bachelor's in business / computer science / information systems (or related)
Skills:Detail-orientedAnalytical approachCommunicationCollaborationOwnership
Certifications:CIPPCIPMCIPTCIACRSCCISA
Tech Stack:DSARNISTPCIITILCCPAGLBANYDFSCFPBData privacy

Eligibility

Work Authorization:Authorization required. Sponsorship not provided.

Company Brief

CarMax
Operates the largest used-car retail chain in the United States, selling and financing pre-owned vehicles through a no-haggle customer experience. Also offers vehicle buying, appraisal, service, and related automotive solutions.
Industry: Automotive
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Richmond, United States
Founded: 1993
WebsiteLinkedIn