Senior Privacy Analyst

At Lyft, our mission is to build a more connected world, ride by ride. 

Lyft connects people to transportation to change the way we live and get around our communities. Our drivers and passengers entrust Lyft with their personal information and travel details to get where they are going and expect us to keep that data safe. Lyft’s Privacy team is comprised of engineers and analysts dedicated to ensuring that appropriate data protection measures are applied at all times. We conduct privacy risk assessments, consult with organizational stakeholders, maintain Lyft’s privacy program, develop privacy policies, and advise on all matters related to privacy.

We are looking for a highly motivated, organized, and passionate individual to join our Privacy and Compliance Team. As a member of this team, you will engage in our privacy-by-design process to ensure that privacy and security are built into our products by default.  Every day, you’ll partner with stakeholders across the company working on exciting new projects, help de-risk their product development, conduct risk assessments, and serve as a trusted adviser to teams across Lyft. You’ll help our team stay organized, on track, and ensure both us and teams across Lyft are meeting their strategic goals. 

This role is ideal for someone who thrives on building structure and takes pride in keeping complex, fast-moving programs organized. You're someone who loves building/improving systems, documenting processes so others can follow them, and maintaining visibility across many workstreams at once. You get energized by cross-functional collaboration and find satisfaction in being the connective tissue that helps teams stay aligned, accountable, and moving forward.

• →Drive operational excellence across the privacy team by streamlining workflows, eliminating redundancies, and building scalable processes that improve team efficiency and output quality
• →Develop and track meaningful program metrics to establish accountability, measure effectiveness, and communicate program health to leadership and cross-functional stakeholders
• →Build and maintain team expertise in tooling and operations software, ensuring consistent adoption and optimal utilization across the program
• →Conduct privacy risk assessments of new and existing Lyft products, services, and processes
• →Assess third parties for security and data protection controls, and provide risk assessments and mitigation recommendations
• →Support and improve the team’s planning and reporting procedures
• →Build strong cross-functional relationships with product and engineering teams and advise them on complex data privacy-related issues
• →Communicate risk to both technical and non-technical stakeholders across the business and negotiate risk mitigation strategies
• →Develop and maintain internal privacy policies, guidelines, and best practices for Lyft

• Knowledge of a broad range of privacy concepts and demonstrated ability to apply them to real-world situations
• Experience conducting privacy risk assessments, third party risk assessments, and and risk mitigation
• Experience with privacy regulations (e.g., CCPA, GDPR, PIPEDA)
• Experience with security compliance frameworks (ISO 27001, PCI-DSS, SOC 2) 
• Experience using Jira for project and task tracking, reporting, and program performance monitoring  
• Experience driving operational improvements within a privacy, security, compliance, or risk function, including process design, metrics development, and tooling adoption
• Strong cross-functional communication and leadership skills, with the ability to initiate and drive projects proactively
• Strong teamwork and collaboration skills
• Strong organizational skills and attention to detail 
• Strong written and verbal communication skills
• Ability to own and manage multiple tasks and high priority projects
• IAPP privacy certifications (e.g., CIPP, CIPM, CIPT) a plus