Privacy & Information Risk Analyst II (Onsite Richmond)

CarMax; Richmond (VA); On-site; USD 80,000 - 100,000; Full time

Job summary

CarMax is seeking an Analyst II for Information Risk Management at the Richmond, VA Technology Innovation Center. The essential duties include coordinating data subject access requests and implementing privacy risk management programs. Ideal candidates will have a relevant Bachelor's degree, over 2 years of experience, and certifications in privacy. This role offers an opportunity to lead privacy operations and process improvements in a dynamic environment. Applicants must have valid U.S. work authorization.

Qualifications

• 2+ years of experience in privacy, technology compliance, IT audit, cybersecurity or related field.
• One or more privacy‑focused certifications such as CIPP, CIPM, CIPT, CIA, CRSC, CISA.
• Experience with relevant U.S. legal frameworks and privacy regulations such as CCPA, GLBA, PCI, NYDFS, CFPB.

Responsibilities

• Coordinate with multiple teams to process data subject access requests (DSAR).
• Implement and measure the privacy risk management program and deliver updates with KPIs.
• Facilitate ongoing data privacy assessments of internal systems.

Skills

Detail oriented

Analytical

Customer focus

Collaboration

Education

Bachelor’s degree in business, computer science, information systems or related field

Tools

Data analysis tools

Job description

CarMax is seeking an Analyst II for Information Risk Management at the Richmond, VA Technology Innovation Center. The essential duties include coordinating data subject access requests and implementing privacy risk management programs. Ideal candidates will have a relevant Bachelor's degree, over 2 years of experience, and certifications in privacy. This role offers an opportunity to lead privacy operations and process improvements in a dynamic environment. Applicants must have valid U.S. work authorization.