Principal Security Governance, Risk & Compliance Analyst
CarGurus · Boston, Massachusetts, United States
Posted about 2 months ago
or apply directly on CarGurus's site. We never take the application ourselves.
Is this posting real?
- This role has been open
- 47 days CarGurus's roles stay open a median of 66 days
- Reposted
- No
- Salary listed
- No 0% of CarGurus's roles list one
- Ghost-job risk at CarGurus
- high 46 stale, 0 reposted of 54 open
- Hiring momentum
- 69 roles opened in the last 90 days ↑ up vs. the prior 90 days
- Last confirmed on the employer's board
- 2026-10-08
Measured from postings appearing on and disappearing from CarGurus's own greenhouse board since 2026-08-03. Full hiring picture for CarGurus.
About this role
The Principal Security Governance, Risk & Compliance Analyst at CarGurus is responsible for leading the cybersecurity governance, risk, and compliance program. This role involves building and maturing cyber risk management initiatives, managing SOC 2 Type II compliance, and integrating security into the software development lifecycle, while collaborating with various teams across the organization.
- benefits
- 5/5
- freshness
- 4/5
- career value
- 5/5
- role clarity
- 5/5
- pay transparency
- 0/5
Scored from the posting itself — how clearly the role is described, how much it says about pay and benefits, and how recently it was listed. Not a judgement of CarGurus as an employer.
What you need
- 8+ years of experience in Information Security, Cyber Risk, GRC, or IT Audit
- Proven experience building and maturing cyber risk management programs in a cloud-native SaaS environment
- Extensive experience leading SOC 2 Type II compliance programs
- Experience supporting SOX ITGCs in partnership with Internal Audit
- Experience building AI governance frameworks and conducting AI security and risk assessments
- Strong knowledge of SOC 2, NIST ISO 27001, GDPR, CCPA, and AWS security principles
What you get
- Equity for all employees
- Career development programs
- Corporate giving programs
- Employee resource groups (ERGs)
- Flexible hybrid model
- Robust time off policies
Worth weighing
- No specific mention of team size or structure
- In-person interviews may be required for candidates in Boston
- Travel expenses for in-person interviews are the candidate's responsibility
Summarised from CarGurus's posting. Read the full original.
Listed by CarGurus on their greenhouse job board, last confirmed open on 2026-10-08. PitchMeAI is not the employer.
More roles at CarGurus
- Sales Engineer, Data SolutionsBoston, Massachusetts, United States
- B2B Marketing SpecialistBoston, Massachusetts, United States
- Manager, Account ManagementBoston, Massachusetts, United States
- Senior Machine Learning Operations EngineerBoston, Massachusetts, United States
- Senior Principal Software Development Engineer, Consumer AI ArchitectBoston, Massachusetts, United States
- Talent Acquisition Operations and Employer Brand ManagerBoston, Massachusetts, United States
- Business Systems AnalystBoston, Massachusetts, United States
- IT Solutions Engineer IIBoston, Massachusetts, United States