CarMax

4 weeks ago

Analyst II, Cybersecurity- Information Risk Management

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 8 hours agoStatus: Live

Job Summary

Maintain and enhance the company’s information risk and privacy management posture by running privacy operations across the privacy lifecycle. Coordinate DSAR intake, assessment, and completion while managing program execution with KPIs and SLA-focused work management. Improve privacy risk processes through automation and AI, support privacy impact assessments, administer privacy technology platforms, and contribute to policy governance and knowledge management.

Location: Richmond

Workplace: Hybrid

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Coordinate with multiple technology teams to capture, assess, and process DSARs timely and accurately.
•Implement, execute, and measure privacy operations services consistently; deliver KPI program updates and maintain SLA-focused work management.
•Identify and implement improvements to privacy risk management processes using process analysis, automation, and AI.
•Administer privacy technology platforms and perform system improvements and administration as part of daily operations.
•Facilitate ongoing privacy impact assessments, manage policy governance lifecycle content, and maintain internal knowledge documentation (playbooks, job aids, diagrams).

Pay and Benefits

Salary: USD 78,800 - 118,200 annually

Equity and Bonus:Equity

Perks:Paid LeavePaid Holidays

Key Requirements

•Bachelor’s degree in business, computer science, information systems, or related fields.
•2+ years of experience in privacy, technology compliance, IT audit, cybersecurity, or related areas.
•Privacy-focused certifications such as CIPP, CIPM, CIPT, CIA, CRSC, or CISA.
•Familiarity with U.S. privacy/legal frameworks and regulations including CCPA, GLBA, PCI, NYDFS, or CFPB.
•Strong attention to detail and accuracy, using repeatable methods to manage work and communicate progress.

Experience:2+ yearsPrivacyTechnology complianceIT auditCybersecurity

Education:Bachelor's

Skills:Detail orientedAnalytical approachCommunicationCollaborationCustomer focus

Certifications:CIPPCIPMCIPTCIACRSCCISA

Tech Stack:AutomationArtificial intelligenceNiSTPCIITILDSAR

Eligibility

Work Authorization:Authorization required. Sponsorship not provided.

Company Brief

CarMax

Industry: Automotive

Website

Loading job details...

Preparing the role view and application actions.

CarMax

4 weeks ago

Analyst II, Cybersecurity- Information Risk Management

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 8 hours agoStatus: Live

Job Summary

Location: Richmond

Workplace: Hybrid

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Coordinate with multiple technology teams to capture, assess, and process DSARs timely and accurately.
•Implement, execute, and measure privacy operations services consistently; deliver KPI program updates and maintain SLA-focused work management.
•Identify and implement improvements to privacy risk management processes using process analysis, automation, and AI.
•Administer privacy technology platforms and perform system improvements and administration as part of daily operations.
•Facilitate ongoing privacy impact assessments, manage policy governance lifecycle content, and maintain internal knowledge documentation (playbooks, job aids, diagrams).

Pay and Benefits

Salary: USD 78,800 - 118,200 annually

Equity and Bonus:Equity

Perks:Paid LeavePaid Holidays

Key Requirements

•Bachelor’s degree in business, computer science, information systems, or related fields.
•2+ years of experience in privacy, technology compliance, IT audit, cybersecurity, or related areas.
•Privacy-focused certifications such as CIPP, CIPM, CIPT, CIA, CRSC, or CISA.
•Familiarity with U.S. privacy/legal frameworks and regulations including CCPA, GLBA, PCI, NYDFS, or CFPB.
•Strong attention to detail and accuracy, using repeatable methods to manage work and communicate progress.

Experience:2+ yearsPrivacyTechnology complianceIT auditCybersecurity

Education:Bachelor's

Skills:Detail orientedAnalytical approachCommunicationCollaborationCustomer focus

Certifications:CIPPCIPMCIPTCIACRSCCISA

Tech Stack:AutomationArtificial intelligenceNiSTPCIITILDSAR

Eligibility

Work Authorization:Authorization required. Sponsorship not provided.

Company Brief

CarMax

Industry: Automotive

Website