Senior Third-Party Risk & Security Assurance Analyst

Lyft; Ciudad de México; Híbrido; MXN 420.000 - 640.000; Jornada completa

Descripción de la vacante

Lyft in Mexico City is seeking a detail-oriented Privacy and Compliance Program Manager to support third party risk management and data protection. You will collaborate with internal stakeholders and external vendors to assess risk, complete security questionnaires, and drive improvements across the program.

Hybrid role; office in Mexico City with three days per week on site, and up to four weeks per year remote.

Formación

• 1-3 years of program management experience supporting third party risk management and security compliance and assurance.
• Knowledge of security frameworks such as ISO 27001, SOC 2, PCI DSS, SOX ITGC, or with international privacy/security regulations such as GDPR, EU AI Act, NIS2, or other international privacy/security compliance experience
• Excellent attention to detail and organizational skills
• Ability to manage a large workload and competing priorities amid resourcing constraints and tight deadlines
• Strong written and verbal communication skills across technical, business, and executive audiences
• Interest in leveraging AI tools or large language models (LLMs), including tools like Claude or Gemini, to automate, improve, or design compliance and assurance processes, documentation, or controls — for example AI-assisted evidence review, policy drafting, questionnaire completion, or pattern analysis across audit findings
• Familiarity with with GRC platforms (e.g., AuditBoard CrossComply, Vanta, or Drata), Safebase, Jira, and vendor management tools
• Knowledge of microservices SaaS product infrastructures or tech stacks a plus

Responsabilidades

• Third Party Risk Assessments
• Review vendor or partner requests from internal stakeholders, understanding the business purpose
• Work with external stakeholders to collect relevant security and data protection information from third parties
• Review the information and accurately assess and document the risk, and propose potential mitigations
• Security Questionnaires
• Draft responses to customer security questionnaires (e.g., CAIQ, SIG) and assist in the management of our external trust center (SafeBase)
• Program Management
• Help senior team members in managing workflows, queues, and tools
• Help the team track and compile reporting and metrics

Conocimientos

Program management

Security compliance

Communication

Attention to detail

AI/LLMs familiarity

GRC tools

Vendor management

Educación

Bachelor's degree in Information Systems / CS / Cybersecurity

Certifications such as CompTIA Security+, PMP, CIPP

Herramientas

AuditBoard

CrossComply

Vanta

Drata

Safebase

Jira

Descripción del empleo

Lyft in Mexico City is seeking a detail-oriented Privacy and Compliance Program Manager to support third party risk management and data protection. You will collaborate with internal stakeholders and external vendors to assess risk, complete security questionnaires, and drive improvements across the program.

Hybrid role; office in Mexico City with three days per week on site, and up to four weeks per year remote.