Director, Internal Audit

At Lyft, our purpose is to serve and connect. We aim to achieve this by cultivating a work environment where all team members belong and have the opportunity to thrive.

We're looking for a forward-thinking, hands-on Director of Internal Audit to help strengthen Lyft’s governance, risk management, and compliance capabilities. Reporting to the Head of Internal Audit and based in our San Francisco HQ, this role will execute Lyft’s internal audit program and serve as a strategic advisor to the business.  This role expands beyond traditional internal audit delivery, embedding audit as a strategic advisor and driver of enterprise risk alignment and governance.

• Execute Lyft’s Internal Audit plan and operations, supporting the Head of Internal Audit in aligning efforts with strategic priorities and key enterprise risks, including global considerations.
• Develop the risk-based annual Internal Audit plan in collaboration with the Head of Internal Audit, ensuring alignment with organizational objectives and top enterprise risks.
• Execute the annual audit plan, covering operational, compliance, financial, and technology risks.
• Lead and actively participate in end to end audit and advisory engagements - scoping, fieldwork, and reporting - with a hands-on approach, ensuring insights are data-driven, practical, and aligned with business priorities, while maintaining high quality, relevance, and actionable outcomes.
• Present audit insights and updates to management, reinforcing Internal Audit’s role as a strategic advisor.
• Oversee follow-up and resolution of audit findings, ensuring timely remediation and clear accountability.
• Champion agile audit practices leveraging data analytics and automation tools to enhance audit efficiency, effectiveness, and insight into emerging risks.
• Maintain and enhance Internal Audit methodologies, tools, and processes to align with industry standards and best practices (e.g., IIA standards, agile audit practices).
• Establish and maintain audit practices aligned with industry standards and leading practices, leveraging peer networks and benchmarking to ensure Lyft’s Internal Audit function remains innovative, efficient, and future-ready.
• Work closely with external auditors and the SOX team to assess internal controls over financial reporting (ICFR), identify key financial risks, and incorporate insights into the annual audit plan to ensure comprehensive risk coverage

• Support the development and execution of an enterprise-wide ERM framework to identify, assess, monitor, and report key strategic, operational, financial, and compliance risks - including those arising from Lyft’s global footprint.
• Partner with business and functional leaders to operationalize risk management practices and promote risk-informed decision-making across the organization.
• Identify and assess enterprise risks across domestic and international markets, including areas such as geopolitical developments, regulatory changes, emerging technologies, cybersecurity, and third-party partnerships.
• Coordinate closely with other risk management functions (e.g., Compliance, Security, Legal) to ensure a holistic approach to risk management.
• Collaborate with cross-functional teams (Legal, Finance, Engineering, Product, Compliance) to improve control frameworks and compliance processes, positioning audit as a strategic enabler.

• Guide, mentor, and elevate internal audit staff, and manage relationships with co-sourced audit partners.
• Build trusted partnerships across the business to embed a risk-aware mindset and drive continuous improvement.

• Proven ability to build, develop, and inspire high-performing teams
• Strategic thinker with the ability to align internal audit and ERM activities to local and international business objectives
• Experience managing audits and assessing risk in international or multi-regional organizations.
• Strong project management skills and ability to manage multiple concurrent priorities
• Excellent communication skills with the ability to influence at all levels
• 10+ years in internal audit, consulting, or compliance roles, ideally in tech or fast-paced, regulated industries
• Experience leading ERM initiatives and integrating global risk insights into strategic planning
• Experience working in a technology platform company a plus
• Deep understanding of tech-related risks (e.g., cybersecurity, data privacy, third-party risk)
• Bachelor’s degree in Business, Finance, Technology, or a related field (Master’s or certifications like CIA, CPA, CISA, or CFE a plus)
• High integrity, sound judgment, and a hands-on, proactive approach