Sr. Analyst, Cybersecurity

Carmax

Hybrid Actively hiring
Richmond, VA Posted 10 days ago

At a glance

AI generated

TL;DR

Join a Fortune 200 company’s dynamic Cybersecurity team as a Senior Technology/Information Risk Analyst, where you’ll play a pivotal role in shaping and expanding the Information Risk Management Program. Your day-to-day will involve conducting risk assessments, developing compliance processes, and supporting cybersecurity training initiatives across various business units. You’ll work closely with senior professionals to design and implement robust information security policies and ensure adherence to regulatory standards like Sarbanes-Oxley, GLBA, HIPAA, PCI, and others. Essential skills include a deep understanding of network controls, cloud environments, and risk management frameworks such as NIST, ISO-27001/2, and ITIL. This role demands strong analytical abilities, excellent communication skills, and the capacity to drive security awareness programs effectively in a fast-paced environment.

Skills

Sarbanes-Oxley GLBA HIPAA CFPB PCI NIST COSO OWASP ISO-27001 CISSP CRISC CISA CISM BCBP CIA Terraform AWS Kubernetes Python SQL Git Jira Confluence

What you'll do

  • Conduct information security risk assessments to identify threats and vulnerabilities.
  • Develop and enforce compliance with company policies and regulatory requirements.
  • Assist in the design and delivery of cybersecurity training programs.
  • Analyze security risks and provide business recommendations for mitigation.
  • Administer governance, risk management, and compliance systems and processes.

What we're looking for

  • 5+ years of experience in enterprise and technology risk management.
  • Proven ability to conduct information security risk assessments.
  • Understanding of key compliance regulations like Sarbanes-Oxley, GLBA, HIPAA, PCI.
  • Experience with governance, risk, and compliance systems.
  • Expertise in network controls, cloud security, and authentication methods.
  • Strong communication skills for delivering training and presentations.
  • CRISC or equivalent industry certification required.

Employer

About Carmax

CarMax is the largest used car retailer in the United States, offering a customer-friendly, no-haggle buying experience with a broad selection of quality used vehicles, financing, and vehicle protection plans. Industry: Automotive Retail

Carmax currently has 33 open roles on FindRole.

Most-posted roles

View all roles at Carmax