Automation-Driven Security Risk & Assurance Tech II

Uber Technologies Inc.; San Francisco (CA); Sur place; USD 153 000 - 170 000; Plein temps

Avantages offerts par ce poste

Bonus program

Equity award

401(k) plan

Benefits package

Résumé du poste

Uber Technologies Inc. is seeking a Security Technologist II to join the Tech Risk and Assurance team. You will automate testing of security controls across Uber’s IT, cloud, and vendor environments, and support risk assessments with clear evidence-based findings.

You’ll write scripts, analyze results, and help deliver continuous monitoring. The role offers opportunities to work with AI tools and collaborate with auditors, engineers, and security teams in a fast-paced setting.

Qualifications

• Bachelor's degree or equivalent practical experience in IT/cybersecurity.
• 3+ years in IT audit, security assurance, risk assessment, or related technical role.
• Experience assessing control design and operating effectiveness across enterprise IT and cloud environments.
• Hands-on automation with Python scripting and SQL querying to collect evidence.
• Knowledge of control frameworks such as NIST CSF/NIST 800-53, ISO 27001, SOC 2, CIS, PCI DSS.
• Excellent written and verbal communication skills for technical and non-technical audiences.

Responsabilités

• Test the design and operating effectiveness of security controls across enterprise IT, cloud, SaaS, and third-party environments, documenting findings.
• Conduct control and configuration assessments, identify deviations, and advise on remediation and audit readiness.
• Build and maintain automated control tests and continuous monitoring with system owners.
• Write scripts and queries to collect and validate audit evidence, reducing manual effort.
• Support internal and external audits and certifications (SOC 2, ISO 27001, PCI DSS), including evidence requests.
• Track corrective actions (POA&Ms) and follow up until closure.
• Support risk assessments of systems, applications, and vendors; draft risk statements and treatment recommendations.
• Maintain risk registers and link test results to risks.
• Review security exception requests for completeness and expiry.
• Explore AI/LLM-based classifications of findings and summaries of audit trails.
• Build dashboards and reports on test results, aging, and exception trends.
• Recommend improvements to policies, procedures, and standards.
• Improve runbooks and onboarding for new team members.

Connaissances

Python scripting

SQL querying

Risk assessment

Security controls testing

Cloud security

Audit familiarity

Communication

GRC tools

Formation

Bachelor's degree or equivalent in IT/Cybersecurity

Outils

ServiceNow eGRC

AuditBoard

Archer

Jira

Description du poste

Uber Technologies Inc. is seeking a Security Technologist II to join the Tech Risk and Assurance team. You will automate testing of security controls across Uber’s IT, cloud, and vendor environments, and support risk assessments with clear evidence-based findings.

You’ll write scripts, analyze results, and help deliver continuous monitoring. The role offers opportunities to work with AI tools and collaborate with auditors, engineers, and security teams in a fast-paced setting.