Director of Security, Risk & Compliance

Uber; United States; On-site; USD 270,000 - 300,000; Full time

Job summary

Uber's Security Risk & Compliance team is hiring a leader to define and drive the strategic program for security risk, compliance, and governance across the company. You will translate complex regulatory requirements into actionable initiatives that unite engineering, security, and business teams.

You will build risk registers, set risk appetite, and scale assurance functions including third-party risk, while developing a high-performing team with clear career paths.

Qualifications

• Bachelor’s degree in a technical field.
• 10+ years in a security-focused role in a large tech enterprise.
• 7+ years in a leadership role building and mentoring teams.
• Experience influencing senior executives on security risk.

Responsibilities

• Translate regulatory requirements into unified security programs.
• Build and maintain security risk registers and risk appetite.
• Drive policy adoption across global regions.
• Scale assurance functions including third-party risk management.
• Develop strategic relationships with Internal Audit and Payments Compliance.

Skills

Security leadership

Governance & risk

Executive communication

Cross-functional collaboration

Education

Bachelor's degree in a technical field

Advanced degree (preferred)

Job description

About the role and team

Uber’s Security Engineering team’s mission is to protect, defend, and secure Uber’s products, infrastructure and data by building highly available, scalable and extensible security solutions and services. We are focused on proactively identifying and remediating security risks as well as swiftly detecting and mitigating security incidents. In the ever-evolving landscape of cybersecurity, we continuously adapt and evolve our defenses in order to always stay one step ahead of potential threats.

Security Risk & Compliance works to fortify that policies, standards, and best practices are in place to assure effective governance, risk management, compliance and protection of Uber's information resources. This is an opportunity to work with teams across Uber and around the globe.

The Director of Security Risk & Compliance is responsible for the overall success in adopting and implementing critical security programs that impact teams, systems, and processes across the company.

What you’ll do

• Construct a strategic vision for Security Risk & Compliance, translating complex regulatory requirements and business goals into a mission that unifies several engineering and security teams.


• Build and maintain corporate cybersecurity risk registers, establishing risk appetite and tolerance levels that empower Uber to make intelligent, high-impact bets safely.


• Drive organizational clarity and accountability for security policies and standards, ensuring they are not just documented but widely adopted and adhered to across all global regions.


• Scale and automate critical assurance functions, including third-party vendor risk management, to reduce friction for engineering teams while maintaining a high security bar.


• Seek out, build, and sustain strategic relationships with Internal Audit, Financial Risk, and Payments Compliance to align objectives and unblock cross-functional initiatives.


• Develop a team of world-class security professionals, creating systems for career growth and succession planning while holding a high bar for excellence and integrity.

Basic Qualifications

• Bachelor’s Degree in a technical field.


• 10+ years of experience in a security-focused role in a large technology enterprise or other large enterprises in a technology heavy industry.


• 7+ years of experience in a leadership role, building, mentoring, and managing high-performing teams of leaders and individual contributors.


• Demonstrated history of interacting with and influencing senior executive management on security assurance and risk-related matters.

Preferred Qualifications

• Advanced degree in a technical field.


• In-depth technical knowledge of infrastructure security vulnerabilities, common controls, and automated mitigation strategies at scale.


• Ability to empower a team while providing them with career paths that align with business goals.


• Sound business judgment, ability to influence others, and strong analytical thinking skills.


• Outstanding storyteller with the ability to articulate a clear vision that balances principled decision-making, user empathy, and data analysis.

You may be eligible for bonuses, equity, and other compensation, as well as a range of benefits.

Offices remain key to collaboration and Uber's culture. Unless approved for full remote work, employees must spend at least 50% of their time in-office. Some roles, like those at greenlight hubs, require full-time in-office presence. Ask your Recruiter for details about this role's requirements.

Uber is proud to be an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. If you have a disability or special need that requires accommodation, please let us know by completing this form.

For New York City, NY-based roles: The base salary range for this role is USD $270,000 per year - USD $300,000 per year.

For San Francisco, CA-based roles: The base salary range for this role is USD $270,000 per year - USD $300,000 per year.

For Seattle, WA-based roles: The base salary range for this role is USD $270,000 per year - USD $300,000 per year.

For Sunnyvale, CA-based roles: The base salary range for this role is USD $270,000 per year - USD $300,000 per year.

For all US locations, you will be eligible to participate in Uber's bonus program, and may be offered an equity award & other types of comp. All full-time employees are eligible to participate in a 401(k) plan. You will also be eligible for various benefits.