Lyft
Senior Security Assurance Analyst
$148K–$185K
New York, NY +2 · Senior · Full-time · Posted Aug 10, 2026
- Location
- New York, NY
New York, New York, United States
Seattle, Washington, United States - Experience
- 5+ years in security GRC, IT audit, or related security assurance; 5+ years hands-on with ISO 27001 and PCI DSS.
About the job
Owns Lyft’s security assurance and compliance programs, audits, risk management, policies, automation, and customer-facing security responses across global markets.
What you'll do
- Lead ISO 27001 and multi-framework compliance programs, coordinating audits and external auditors.
- Manage security risks and policies, advising stakeholders and supporting customer contract reviews.
- Scale evidence collection and control testing with automation and AI, and own customer questionnaire responses and the external trust center.
What they ask for
- 5+ years in security GRC, IT audit, or related security assurance; 5+ years of hands-on ISO 27001 and PCI DSS experience.
- In-depth knowledge of SOC 2, HIPAA, and NIST CSF, plus experience with global and international compliance requirements including EU and UK frameworks.
- Experience managing, reviewing, and drafting information security policies and procedures.
- Strong technical background and cross-functional communication and leadership skills.
Nice to have
- Experience with GRC platforms, Jira, SafeBase, or AI/LLMs for compliance and assurance processes.
- Relevant certifications, consulting experience, vulnerability management, or cloud and scripting skills.
Pay
$148,000 - $185,000 USD base salary
Tools
ISO 27001, PCI DSS, SOC 2, HIPAA, NIST CSF, Jira, Confluence, SafeBase
AI focus
Use AI tools and LLM-based workflows to automate and improve compliance and assurance processes, documentation, and controls, including evidence review, policy drafting, control testing, and questionnaire responses.
Model-written summary · the original posting is authoritative