Senior Third-Party Security & Privacy Assurance Analyst

Lyft; Ciudad de México; Híbrido; MXN 900.000 - 1.200.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid schedule

Office in Mexico City

Descripción de la vacante

Lyft is seeking a senior Privacy and Compliance professional to join our team in Mexico City. You will lead third party risk assessments, collect security information from vendors, and draft responses to security questionnaires while supporting program management and reporting across the organization.

The role requires 1–3 years in risk management and familiarity with leading compliance frameworks and GRC tools; it is office-based with a hybrid schedule, three days in the office per week in

Formación

• 1–3 years of program management experience supporting third party risk management and security compliance.
• Knowledge of security frameworks such as ISO 27001, SOC 2, PCI DSS, SOX ITGC, or GDPR/NIS2/privacy regs.
• Excellent attention to detail and organizational skills.
• Ability to manage a large workload and tight deadlines.
• Strong written and verbal communication across technical, business, and executive audiences.
• Interest in leveraging AI tools or LLMs to automate compliance processes.
• Familiarity with GRC platforms (AuditBoard, CrossComply, Vanta, Drata), Safebase, Jira.
• Knowledge of microservices SaaS product infrastructures is a plus.

Responsabilidades

• Conduct third party risk assessments, document risk, and propose mitigations.
• Review vendor requests from stakeholders and collect security data from third parties.
• Draft responses to security questionnaires (CAIQ, SIG) and manage SafeBase external trust center.
• Support program management, including workflows, queues, and reporting metrics.

Conocimientos

Program management

Security compliance

Vendor risk management

Communication

AI/mL tools interest

GRC awareness

Educación

Bachelor's in IS/CS/Cybersecurity/Data Science

Certifications (CompTIA Security+, Network+, PMP, CIPP)

Herramientas

AuditBoard

CrossComply

Vanta

Drata

Safebase

Jira

Descripción del empleo

Lyft is seeking a senior Privacy and Compliance professional to join our team in Mexico City. You will lead third party risk assessments, collect security information from vendors, and draft responses to security questionnaires while supporting program management and reporting across the organization.

The role requires 1–3 years in risk management and familiarity with leading compliance frameworks and GRC tools; it is office-based with a hybrid schedule, three days in the office per week in