Senior TPRM Cyber Risk Analyst

CarMax; United States; On-site; USD 103,000 - 154,000; Full time

Benefits offered by this job

Paid time off

Holiday pay

Medical benefits

Job summary

CarMax is hiring a Senior Analyst for Information Risk Management to lead and mature the Third-Party Risk Management program. You will own policy, risk scoring, and cross-domain reviews to protect CarMax and its customers.

Based in Richmond, VA, this senior contributor role requires strong communication, analytical rigor, and experience with enterprise GRC tools. Join a Fortune 200 company committed to diversity and inclusion.

Qualifications

• Bachelor's degree in Business / Computer Science / Information Systems with IT audit, risk or compliance experience preferred.
• Experience executing third-party risk management programs at an organizational level.
• Proficiency in risk-based, structured standards and processes.

Responsibilities

• Own and optimize the Third-Party Risk Management program.
• Drive the program strategy and multi-year roadmap.
• Coordinate assessments across security, privacy, resilience and compliance domains.
• Prepare and deliver program updates and metrics to leadership.

Skills

Information risk management

Risk analysis

Vendor management

Communication skills

Analytical thinking

GRC platforms

Education

Bachelor's degree in Business / Computer Science / Information Systems

IT audit / risk / compliance experience

Tools

Optro

OneTrust

Archer

BitSight

Job description

CarMax is hiring a Senior Analyst for Information Risk Management to lead and mature the Third-Party Risk Management program. You will own policy, risk scoring, and cross-domain reviews to protect CarMax and its customers.

Based in Richmond, VA, this senior contributor role requires strong communication, analytical rigor, and experience with enterprise GRC tools. Join a Fortune 200 company committed to diversity and inclusion.