Sr. Analyst, Technology Compliance
CarMaxAbout the role
About this job
We are looking for a Senior Technology Compliance Analyst who will play a pivotal role in advancing our Compliance Program. This unique opportunity allows you to serve as a subject matter expert, collaborating with Technology management teams to design, evaluate and test internal controls for efficiency and effectiveness. In this role, you will monitor regulatory and technology changes, coordinate with internal and external auditors, and ensure compliance across the organization. You will lead control reviews for new business areas, technologies, and evolving processes, identify gaps between policy and practice, and recommend remediation strategies.
What you will do – Essential Responsibilities
Develop and maintain a comprehensive framework for Technology Compliance, including validation, classification, and control testing across IT domains (e.g., PCI DSS, HIPAA, Data Privacy).
Execute enterprise compliance governance frameworks, balancing risk appetite with business needs and translating findings into actionable steps.
Lead compliance assessments and pre-implementation reviews to ensure proper controls are designed, implemented, and documented.
Design, implement, and maintain enterprise-wide General IT Controls (GITCs) and compliance frameworks aligned with regulatory requirements (PCI DSS, SOX, HIPAA, Data Privacy, etc.).
Develop and enforce processes and procedures to ensure adherence to company policies, laws, and industry standards (e.g., NIST, ITIL).
Influence compliance strategy and direction within established standards and guidance.
Act as a trusted advisor and subject matter expert on technology key controls, partnering to evaluate control effectiveness, identify risks, and support remediation efforts.
Leverage technical experience to assist management in designing appropriate automation and system configurations to support the enforcement and collection of compliance-related evidence.
Facilitate internal and external audits, and provide clear, timely communication of findings, recommendations, and remediation plans.
Monitor and validate information security controls, analyze trends in control weaknesses, and recommend enhancements to meet evolving compliance standards.
Collaborate cross-functionally while demonstrating ownership, initiative, and effective communication on compliance matters.
Execute enterprise compliance governance frameworks, balancing risk appetite with business needs and translating findings into actionable steps.
Assess compliance exposure and deficiencies across internal and external systems, recommending effective solutions.
Lead remediation and design review meetings, build consensus on compliance strategies, and influence direction across teams.
Maintain awareness of emerging technology trends and evolving external regulations to proactively adapt compliance processes.
Purpose of the role
As a Senior Technology
Apply for this role
Generate a tailored application kit with a matched cover letter, interview prep, and CV highlights — in under 60 seconds.
Apply Now →Generate Application KitFree account required — sign up in 30s