Analyst II, Cybersecurity- Information Risk Management

Essential Responsibilities

• Facilitate and support regulatory and privacy operations for the company to ensure an effective and compliant posture for CarMax and our customers.
• Serve as the conduit between the business community, Privacy core team, technology, and the application development teams.
• Manage the intake, analysis, and completion of privacy requests and facilitate all operational aspects of the privacy lifecycle, including:
• Data Subject Access Requests (DSAR)
• Privacy Operations Management
• Process Improvement
• Privacy Technology Administration
• Privacy Impact Assessment
• Policy Governance Lifecycle Management
• Knowledge Management
• Projects as defined

Qualifications and Requirements

• Bachelor’s degree in business / computer science / information systems (or related)
• 2+ years working experience in privacy, technology compliance, IT Audit, cybersecurity, or related experience
• One or more of the following privacy-focused certifications such as: CIPP, CIPM, CIPT, CIA, CRSC, CISA
• Experience / familiarity with relevant U.S. legal frameworks and privacy regulation such as: CCPA, GLBA, PCI, NYDFS, CFPB
• Detail oriented – Possess a keen eye for detail and accuracy in all operations. Leverage defined, repeatable methods for managing work and communicating progress and priority.
• Analytical approach – Ability to perform data analysis and trending, problem solve obstacles and find alternative ways to meet and achieve privacy goals.
• Ability to understand and implement information risk and privacy principles across disciplines. Apply a risk-based approach to analysis in a fast-paced, rapidly evolving environment.
• Customer Focus – Ability to provide exceptional customer service for our internal partners, with a mindset for understanding their need and consistently finding ways to exceed expectation.
• Communication – Excellent verbal and written communication skills, with the ability to structure and deliver clear, accurate messaging. Ability to create and present concepts to various audiences, facilitate discussion with diplomacy while seeking diverse opinions to reach consensus.
• Collaboration – Strong emphasis on effective relationship building and partnership.
• Demonstrate initiative, ownership, and a service-oriented mindset in all interactions.

About CarMax

CarMax disrupted the auto industry by delivering the honest, transparent and high-integrity experience customers want and deserve. This innovative thinking around the way cars are bought and sold has helped us become the nation’s largest retailer of used cars, with over 200 locations nationwide.

Our amazing team of more than 25,000 associates work together to deliver iconic customer experiences. Along the way, we help every associate grow their career and achieve their best, at work and in their community. We are recognized for our commitment to training and diversity and are one of the FORTUNE 100 Best Companies to Work For®.

CarMax Commitment to Diversity and Inclusion

CarMax is committed to bringing together people from different backgrounds and perspectives, providing employees with a safe, welcoming, and inclusive work environment.

Annual Salary Range

$78,800.00 - $118,200.00 May be eligible for bonus and equity.

Benefits

Except as otherwise required by state law, CarMax Associates are entitled to the following paid sick, vacation, and holiday time.

• To earn up to 48 hours of sick time per year accrued on a per pay period basis and between 80 hours and 200 hours per year of vacation time after a 90 day waiting period depending on years of continuous service with the Company.
• For 8 hours of pay for each of a total of 6 paid scheduled holidays per year plus 1 floating holiday. If such an Associate does work on a scheduled holiday due to business need, they are eligible for Holiday Premium Pay.
• Full-time salaried Associates are entitled to paid time away with no specified limit as needed for sick, vacation, bereavement, jury duty, holidays, floating holiday, etc. subject to manager approval.