CarGurus
We're re-engineering car shopping. Join us for the ride.
Cambridge, MA, USA
Hybrid

Senior Data Security Risk Analyst

Sorry, this job was removed at 7:01 p.m. (CST) on Tuesday, April 23, 2024
Find out who's hiring in Boston, MA.
See all Data + Analytics jobs in Boston, MA
Easy Apply
By clicking Apply Now you agree to share your profile information with the hiring company.

Who we are

At CarGurus (NASDAQ: CARG), our mission is to give people the power to reach their destination. We started as a small team of developers determined to bring trust and transparency to car shopping. Since then, our history of innovation and go-to-market acceleration has driven industry-leading growth. In fact, we’re the largest and fastest-growing automotive marketplace, and we’ve been profitable for over 15 years.

What we do

The market is evolving, and we are too, moving the entire automotive journey online and guiding our customers through every step. That includes everything from the sale of an old car to the financing, purchase, and delivery of a new one. Today, tens of millions of consumers visit CarGurus.com each month, and ~30,000 dealerships use our products. But they're not the only ones who love CarGurus—our employees do, too. We have a people-first culture that fosters kindness, collaboration, and innovation, and empowers our Gurus with tools to fuel their career growth. Disrupting a trillion-dollar industry requires fresh and diverse perspectives. Come join us for the ride!

Working on the Information Security Risk and Compliance team, you will play a critical role in ensuring the confidentiality, integrity, and availability of data assets while complying with regulatory requirements and industry best practices. 

Identifying, classifying, and outlining mitigation plans for risks associated with the handling, storage, and transmission of sensitive data within our organization are core functions of this role.This position requires a deep understanding of data governance principles, data classification methodologies, strong understanding of technology risk management, and regulatory frameworks and compliance standards. 

A well-qualified candidate will be comfortable taking direction from management and be able to work autonomously when given an assignment or project.The candidate must have strong written, verbal communication and organization skills, and a solid understanding of different data storage technologies, regulations around data security and risk management. Project management and attention to detail as a must. They are also expected to help mentor junior members of the team. 

Responsibilities: 

Data Classification and Inventory:

  • Develop and maintain a comprehensive inventory of organizational data assets, including their classification levels, sensitivity, and associated risks using our data security platform.
  • Implement data classification frameworks and methodologies to categorize data according to its level of sensitivity, criticality, and regulatory requirements.
  • Collaborate with business units and data owners to identify and document data flows, usage patterns, and access controls for classified data.

Risk Assessment and Analysis:

  • Conduct thorough risk assessments of classified data assets to identify potential vulnerabilities, threats, and compliance gaps.
  • Analyze and evaluate the effectiveness of existing controls and security measures in mitigating data-related risks.
  • Develop risk treatment plans and mitigation strategies to address identified vulnerabilities and improve the overall security posture of data assets.

Compliance and Regulatory Alignment:

  • Ensure compliance with relevant data protection regulations, such as GDPR, CCPA, etc., by assessing data handling practices against regulatory requirements.
  • Monitor changes in data protection laws and regulations to ensure ongoing compliance and adapt data classification policies and procedures.
  • Provide guidance and support to business units on regulatory requirements and industry best practices related to data classification and risk management.

Data Protection Controls:

  • Recommend and implement technical controls, encryption mechanisms, access controls, and data loss prevention (DLP) solutions to protect classified data from unauthorized access, disclosure, or misuse.
  • Conduct periodic assessments of data protection controls and security measures to validate their effectiveness and identify areas for improvement.
  • Collaborate with  IT and Security teams to integrate data protection controls into technology systems and infrastructure.

Reporting and Communication:

  • Prepare and present comprehensive risk assessment reports, findings, and recommendations to senior management.
  • Communicate effectively with business units and data owners to raise awareness of data classification requirements, risks, and responsibilities.
  • Collaborate with internal audit teams and external auditors to facilitate data classification reviews and compliance assessments.
  • Work closely with the project team to ensure that deliverables are on time and budget.

Tool Implementation and Maintenance: 

  • Design and architect the implementation of Data Discovery and DLP tools.
  • Coordinate with the vendor account management teams to improve the capabilities of the tools and participate in QBRs.
  • Prepare and present to stakeholders new tool improvements and enhancements.

Qualifications:

  • Bachelor's degree in Information Security, Computer Science, or related field; Master's degree preferred.
  • Relevant certifications such as CISSP, CISM, CRISC, or equivalent are highly desirable.
  • Experience working in an agile development environment.
  • 5+ years of experience in data classification, risk management, or information security.
  • Strong understanding of data classification methodologies, risk assessment frameworks, and regulatory requirements.
  • Experience with data protection technologies, such as encryption, access controls, and data loss prevention (DLP) solutions.
  • Familiarity with relevant data protection regulations, such as GDPR, CCPA, etc.
  • Excellent analytical and problem-solving skills, with the ability to effectively identify and prioritize data-related risks.
  • Strong communication skills, with the ability to convey complex technical concepts to non-technical stakeholders.
  • Strong project management capabilities and holding self and others accountable for their deliverables.
  • Ability to mentor junior team members. 

Working at CarGurus

We reward our Gurus’ curiosity and passion with best-in-class benefits and compensation, including equity for all employees, both when they start and as they continue to grow with us. Our career development and corporate giving programs, as well as our employee resource groups (ERGs) and communities, help people build connections while making an impact in personally meaningful ways. A flexible hybrid model and robust time off policies encourage work-life balance and individual well-being. Thoughtful perks like daily free lunch, a new car discount, meditation and fitness apps, commuting cost coverage, and more help our people create space for what matters most in their personal and professional lives.

We welcome all

CarGurus strives to be a place to which people can bring the ultimate expression of themselves and their potential—starting with our hiring process. We do not discriminate based on race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation. We foster an inclusive environment that values people for their skills, experiences, and unique perspectives. That’s why we hope you’ll apply even if you don’t check every box listed in the job description. We also encourage you to tell your recruiter if you require accommodations to participate in our hiring process due to a disability so we can provide the appropriate support. We want to know what only you can bring to CarGurus. #LI-Hybrid

See More
Easy Apply
By clicking Apply Now you agree to share your profile information with the hiring company.

What are CarGurus Perks + Benefits

CarGurus Benefits Overview

We reward our Gurus' curiosity and passion with best-in-class benefits and compensation, including equity for all employees, both when they start and as they continue to grow with us. Our career development and corporate giving programs, as well as our employee resource groups (ERGs) and communities, help people build connections while making an impact in personally meaningful ways. A flexible hybrid model and robust time off policies encourage work-life balance and individual well-being. Thoughtful perks like $15/day toward lunch in the office, a new car discount, meditation and fitness apps, commuting cost coverage, and more help our people create space for what matters most in their personal and professional lives.

Culture
Volunteer in local community
CarGurus hosts fundraisers and volunteer outings year-round. Our 2023 service weeks are November 6-17 and feature opportunities to support 19 organizations for meal prep, coaching, cleanups, and more
Partners with nonprofits
CarGurus partners with many orgs working to drive equity and inclusion, support people in need, and train tomorrow's tech leaders, including Building Impact, the Red Sox Foundation, and Hack.Diversity
Open door policy
OKR operational model
Team based strategic planning
Pair programming
Open office floor plan
Employee resource groups
Employee-led culture committees
Quarterly engagement surveys
Hybrid work model
In-person all-hands meetings
Many CG teams have regular, in-person all-hands meetings at which they share updates, celebrate success, recognize individual contributions, and discuss what's to come
In-person revenue kickoff
President's club
Employee awards
Flexible work schedule
Our hybrid model gives Gurus flexibility to integrate work and life. Perks like a $15/day lunch subsidy, paid commuter fees, and pop-up events make in-office time easy to enjoy
Remote work program
Field sales roles are remote by design, as well as select roles on other teams on a case-by-case basis
Diversity
Documented equal pay policy
Dedicated diversity and inclusion staff
Highly diverse management team
Diverse voices power innovation! Our managers, directors, and leaders bring a range of backgrounds, experiences, and perspectives to our work each day
Mandated unconscious bias training
Unconscious bias has the potential to impact decision-making, team dynamics, and career growth. Training on how to identify, challenge, and avoid it is required to be completed by all Gurus
Diversity manifesto
Mean gender pay gap below 10%
Diversity employee resource groups
We have 7 ERGs that welcome, support, and connect Gurus--AccessAbililty@CG, AAPI@CG, CG Salutes Service, LGBTQ+@CG, Parents@CG, POC@CG, and Women@CG plus Women in Tech and Women in Sales communities
Hiring practices that promote diversity
We promote diversity in hiring by sourcing candidates with a range of backgrounds through various job boards and partner orgs and support them with an inclusive and equitable recruiting experience
Diversity recruitment program
Our On-Ramp early careers program connects engineers from traditionally marginalized groups with entry-level tech roles. We adhere to DEIB best practices when recruiting for all positions
Health Insurance + Wellness
Flexible Spending Account (FSA)
To best support our Gurus and their families, CarGurus offers three different Flexible Spending Accounts to help employees cover qualified health care and/or dependent care expenses
Disability insurance
In the event of a non-work-related injury or sickness, CarGurus pays a monthly benefit for short-term disability for up to 12 weeks, and long-term disability for those who qualify
Dental insurance
Our Blue Cross Blue Shield dental coverage includes four cleanings a year to help Gurus keep their teeth healthy and smiles bright
Vision insurance
Our vision coverage through VSP includes an annual eye exam along with other benefits such as lenses and frames. Gurus also have access to discounts on prescriptions and laser vision correction
Health insurance
Health insurance is provided through Blue Cross Blue Shield with two PPO options to choose from including a PPO Saver Plan with HSA, to which CG contributes
Life insurance
We offer Basic Life and AD&D Insurance through Sun Life Financial, providing beneficiaries with 2X your annual earnings up to $500K. Add'l coverage can be purchased for spouse/kids/domestic partner
Pet insurance
Gurus love their furry, feathered, and scaly friends. We offer a pet insurance discount program through MetLife
Wellness programs
Visit our wellness rooms for prayer, quiet time, and meditation. Ongoing programming includes onsite eye exams, nutrition and mental health seminars, Red Cross first aid training, and more
Team workouts
Gurus break a sweat together in person and virutally through our #peloton Slack channel, Studio SWEAT onDemand membership, and workouts with local orgs like InnerCity Weightlifting
Mental health benefits
Gurus get a free Headspace subscription, counseling/support services through our Employee Assistance Program, and access to guest speakers covering stress management, burnout prevention, and more
Transgender health care benefits
Wellness days
We supplement our flexible hybrid model and unlimited PTO with periodic mental health days off each year and ongoing wellness programming like on-site yoga and expert talks
Abortion travel benefits
We cover travel for reproductive care that's not available in-state, such as transportation, car rental, mileage, and lodging costs. 1:1 virtual visits with fertility health experts are also available
Financial & Retirement
401(K)
We offer traditional and Roth 401K plans through Fidelity with automatic enrollment after 30 days. CarGurus will match 50% of your contributions up to 8%. Employee contributions are always 100% vested
401(K) matching
CarGurus matches 50 cents of every dollar of your 401K contributions up to 8% of your eligible compensation. You're 50% vested after one year of employment, 100% vested after two
Company equity
We offer Restricted stock units (RSUs) to new hires, subject to time-based vesting tied to employment. Gurus have the potential to earn more RSUs through retention programs and eligible promotions
Performance bonus
We reward your hard work. Depending on your role, you will be eligible for either our sales incentive or employee bonus program
Charitable contribution matching
Our Charitable Giving program is funded annually to help Gurus give back to non-profit organizations with which they have a personal connection
Pay transparency
Child Care & Parental Leave
Childcare benefits
Care.com membership gives Gurus access to babysitters, nannies, senior caregivers, home health aides, dog walkers, pet sitters, and more plus 8 free days of emergency backup care
Generous parental leave
We offer 100% paid pregnancy-related medical leave up to 16 weeks plus 15 days of gradual return. For parental leave, we offer 100% paid leave up to 8 weeks consecutively or intermittently
Family medical leave
CarGurus has a private plan through SunLife, which provides benefits as generous as the MA Paid Family Medical Leave (PFML) program
Adoption Assistance
All employees are eligible for 8 weeks of parental leave plus 4 weeks for adoption/foster care. We reimburse adoption expenses of up to $10K annually, up to $20K, through Carrot Fertility
Restricted work hours
We respect after-hours and PTO boundaries, and encourage Gurus to pause notifications, block focus time, and update their Slack status to help manage their time
Return-to-work program post parental leave
Company sponsored family events
In partnership with our Parents@CG ERG, we host ongoing in-person and virtual family events year-round, including a Halloween party and holiday gingerbread house decorating
Fertility benefits
All Gurus receive fertility health and family-forming benefits through Carrot Fertility including adoption, in vitro fertilization, egg/sperm freezing, and menopause support
Vacation + Time Off
Generous PTO
Our unlimited PTO empowers Gurus to take time away for doctor visits, parent-teacher conferences, home repair appointments, etc. Some use PTO for religious holidays that we do not already have off
Paid volunteer time
CarGurus offers paid volunteer time during our annual service week through which we support nonprofit partners with career coaching, food prep and service, waste cleanup, and more
Sabbatical
Get one month off after 5 years at CarGurus, and another after 10. People use this time to take dream vacations, visit family abroad, and attend playoff games... or to do nothing at all!
Paid holidays
Paid sick days
Our unlimited sick leave allows Gurus to take the time they need to care for their own physical or mental health and/or that of a family member
Flexible time off
Bereavement leave benefits
Company-wide vacation
We supplement our flexible hybrid model and 12 company holidays with unlimited PTO with periodic mental health days off each year
Office Perks
Commuter benefits
Our commuter benefits cover parking, train fare, and other expenses depending on how you travel to work. A quarterly stipend is available to those who walk or bike to the office
Company-sponsored outings
We connect regularly in and out of the office, including at our legendary annual party. IYKYK
Free daily meals
In-office employees get $15 toward lunch from 4-7 restaurants each day which makes lunch free for most. We ensure options reflect diverse cuisines and accommodate food allergies and preferences
Free snacks and drinks
Sweet, salty, crispy, chewy, crunchy, and caffeinated--we have it all in our well-stocked kitchens
Some meals provided
We provide $15 toward every day in the office--making them free to many--and an abundance of snacks. Our Dining Club connects employees and leaders for local restaurant dinners every quarter
Company-sponsored happy hours
Catch up with friends and make new ones at our regular happy hours. These typically feature an open bar and fun bites
Onsite office parking
CarGurus employees don't worry about where they will park with our on-site or nearby garage options and parking subsidy
Recreational clubs
Gurus connect in-person and virtually for game nights, Peloton rides, book clubs, travel talk, scotch tastings, dining out, and more
Relocation assistance
Relocation assistance is available depending on role level and location. Ask your recruiter for details
Fitness stipend
Get a free gym membership and reimbursement of up to $300 for fitness-related expenditures, plus a free subscription to the Studio SWEAT onDemand fitness app
Home-office stipend for remote employees
Our IT Service Desk provides a number of peripherals and accessories for at-home productivity for full-time remote Gurus
Meditation space
Mother's room
Professional Development
Job training & conferences
Our Career Development Model includes time for outside learning and development. We think this makes our people more well-rounded and connected
Tuition reimbursement
We offer up to $10K per calendar year for tuition reimbursement for graduate-level courses and $5K for undergrad for employees working 30+ hours a week
Lunch and learns
Our regular info sessions include a monthly "Welcome, Ask Me Anything" (WAMA) series with senior leaders, quarterly Town Halls, and product and skill-focused seminars with internal and external SMEs
Promote from within
Mentorship program
Our popular Elevate mentorship program pairs employees with experienced leaders to discuss personal and professional development while growing participants' skills and network
Continuing education stipend
We offer up to $10K per calendar year for tuition reimbursement for graduate-level courses and $5K for undergrad. Plus, all Gurus have access to over 16K courses through LinkedIn Learning
Continuing education available during work hours
Our Career Development Model builds in time for outside learning and development, and we encourage Gurus to pause notifications and block focus time as needed, including for LinkedIn Learning courses
Online course subscriptions available
Customized development tracks
Paid industry certifications
To help our Gurus reach their personal and professional development goals, we offer stipends for industry certifications that vary by role and department
Personal development training
Virtual coaching services
Apprenticeship programs
We partner with the Cambridge STEAM Initiative to give students most impacted by systemic inequities the chance to shadow and support our tech teams. Guru mentors find the program very rewarding

More Jobs at CarGurus

Easy Apply
By clicking Apply Now you agree to share your profile information with the hiring company.
Learn more about CarGurusFind similar jobs like this