Senior Security Assurance Analyst

Lyft · New York, NYsenior

En corto

▸Analista de Seguridad Senior que gestiona cumplimiento global (ISO 27001, SOC 2, PCI DSS, etc.)
▸Lidera auditorías externas, automatiza pruebas de controles y apoya a equipos técnicos y legales
▸Destacado: uso de IA y LLMs para automatizar procesos de cumplimiento y documentación

Fluency in English required

En ~1 minuto te damos: quién te entrevista, las preguntas probables con respuestas desde tu CV, y tu CV adaptado a esta vacante. Gratis, sin tarjeta.

¿Qué piden?

✓Experiencia sólida en programas de cumplimiento como ISO 27001, SOC 2, PCI DSS
✓Capacidad para liderar auditorías externas y gestionar relaciones con certificadores
✓Conocimiento avanzado en marcos globales: NIST CSF, UK Cyber Essentials, EU CRA/NIS2
✓Habilidades para traducir riesgos técnicos en recomendaciones claras para no técnicos
✓Experiencia en automatización de pruebas de controles y gestión de evidencias
✓Experiencia colaborando con equipos de ingeniería, legal y privacidad

¿No cumplís todo? Es lo normal — tu dossier gratis te dice qué gaps tenés y cómo cubrirlos en la entrevista.

JiraConfluenceAI toolsLLM-based workflowsISO 27001SOC 2PCI DSSHIPAANIST CSFUK Cyber Essentials

¿A quién escribirle en Lyft?

Tu dossier gratis identifica a las personas que te entrevistarían — con su background, qué valoran y cómo escribirles para destacar antes de aplicar.

At Lyft, our purpose is to serve and connect. We aim to achieve this by cultivating a work environment where all team members belong and have the opportunity to thrive. Lyft connects people to transportation to change the way we live and get around our communities. Our drivers and passengers entrust Lyft with their personal information and travel details to get where they are going and expect us to keep that data safe. Lyft's Customer Trust team ensures that appropriate security controls and data protections are applied to meet our compliance requirements and customer contractual commitments. We conduct security risk assessments, consult with organizational stakeholders, monitor and continuously improve Lyft's Information Security program, facilitate third-party security audits, work with engineering teams to implement, automate, and monitor security controls, develop policies, and advise on all matters related to information security assurance. We are looking for a highly motivated, organized, and detail-oriented individual to join our Customer Trust team. As a senior member of this team, you will own a portfolio of concurrent, multi-program compliance efforts and help ensure Lyft meets its enterprise promises and contractual commitments to customers on security and privacy across global markets. You'll manage relationships with external auditors and internal stakeholders, scale our program through efficient processes and automation, and serve as a trusted advisor on technical compliance matters spanning North America, the EU, and the UK. Responsibilities: • Program & Audit Ownership • Own and lead our ISO 27001 compliance program end-to-end, from certification planning and internal audit through surveillance cycles and Statement of Applicability updates • Drive execution across our multi-program compliance portfolio spanning SOC 2, PCI DSS, HIPAA, and NIST CSF, alongside global and international frameworks including UK Cyber Essentials, Spain ENS, and emerging EU regulations such as the Cyber Resilience Act (CRA), Radio Equipment Directive (RED), and NIS2 • Serve as the primary liaison to external auditors, QSAs, and certification bodies, managing the full audit lifecycle across concurrent engagements and keeping internal stakeholders aligned on timelines and deliverables • Risk, Policy & Stakeholder Advisory • Own the Security Risk Management Framework, ensuring risk identification, treatment, and reporting activities are consistently managed, tracked, and communicated across the business • Lead the development, review, and maintenance of internal information security and data protection policies, standards, and procedures, and drive policy awareness across the organization • Build and maintain strong cross-functional relationships with Engineering, Legal, Privacy, and Sales, advising on complex compliance requirements and translating technical risk into clear, actionable guidance for both technical and non-technical audiences • Support review of security provisions in customer contracts, MSAs, and security exhibits, partnering with Legal and Sales to provide clear, actionable security positions during negotiations • Evidence, Automation & Tooling • Drive evidence collection and continuous control testing using our workflow tools (Jira, Confluence), building scalable and repeatable processes across programs • Partner with Engineering to design, implement, and monitor automated evidence collection, continuous control testing, and remediation tracking • Leverage AI tools and LLM-based workflows to automate and improve compliance and assurance processes, documentation, and controls — for example accelerating evidence review, policy drafting, control testing, and questionnaire responses — and share effec

No apliques sin prepararte

Investigamos quién te entrevista, adaptamos tu CV y te ensayamos en vivo — gratis la primera.