Principal Security Governance, Risk & Compliance Analyst

The Principal Security Governance, Risk & Compliance Analyst at CarGurus is responsible for leading the cybersecurity governance, risk, and compliance program. This role involves building and maturing cyber risk management initiatives, managing SOC 2 Type II compliance, and integrating security into the software development lifecycle, while collaborating with various teams across the organization.

• Equity for all employees
• Career development programs
• Corporate giving programs
• Employee resource groups (ERGs)
• Flexible hybrid model
• Robust time off policies

• No specific mention of team size or structure
• In-person interviews may be required for candidates in Boston
• Travel expenses for in-person interviews are the candidate's responsibility