Head of Cybersecurity, Risk & Compliance

CarParts.com • Long Beach, CA

2d • $195,000 - $250,000 • Onsite

About The Position

This role reports directly to the CTO and closes the governance gap left by the departing AVP of Infrastructure and Security. Head of Cybersecurity, Risk & Compliance separates technical security execution from risk governance, ensuring CarParts.com's security posture, regulatory compliance (PCI, SOX), and audit-readiness stay board-visible.

Requirements

• 8+ years in cybersecurity/GRC, 3+ in a leadership role
• Direct experience with PCI-DSS and SOX control environments
• Experience presenting to audit committees or boards
• Track record building or scaling a GRC function

Nice To Haves

• CISSP, CISM, or equivalent certification
• eCommerce/retail security experience
• Familiarity with NIST frameworks and SIEM tooling (e.g. Splunk, Elastic)

Responsibilities

• Own security engineering: controls, hardening, and security tooling
• Lead threat detection & response — monitoring, triage, and incident response
• Drive governance, risk & compliance: policies, evidence, and control mapping
• Own PCI & SOX controls: control ownership, testing, and remediation
• Manage vendor and third-party risk reviews, contracts, and remediation
• Deliver board-ready audit committee reporting on posture, risks, and exceptions

Benefits

• Competitive salary
• Opportunities for growth and advancement

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed