Senior Security Assurance & Compliance Analyst

Triwill Group; New York (NY); Hybrid; USD 148,000 - 185,000; Full time

Benefits offered by this job

Health insurance

Mental health benefits

401(k) with company match

Paid time off

Job summary

Lyft seeks a senior security/compliance professional to own a portfolio of multi-program compliance efforts, ensuring enterprise promises and contractual commitments around security and privacy across NA, EU, and UK. You will manage external audits, automate evidence collection, and advise stakeholders on complex regulatory requirements.

You will partner with Engineering, Legal, Privacy, and Sales to translate risk into actionable guidance, aligning cross-functional teams and driving proactive

Qualifications

• 5+ years in security governance, risk, and compliance (GRC) or related security assurance role.
• 5+ years of hands-on ISO 27001 and PCI DSS experience.
• In-depth knowledge of SOC 2, HIPAA, and NIST CSF assessments/certifications.
• Experience managing a multi-program compliance portfolio spanning global requirements.
• Experience drafting InfoSec policies and procedures.
• Strong cross-functional communication and leadership skills.

Responsibilities

• Own ISO 27001 compliance program end-to-end, from planning to surveillance and updates.
• Drive multi-program compliance across SOC 2, PCI DSS, HIPAA, and NIST CSF; cover UK/EU scope.
• Lead policy development and stakeholder advisory with Engineering, Legal, Privacy, and Sales.
• Drive evidence collection and automated testing using Jira/Confluence and tooling.
• Manage customer security questionnaires and the SafeBase trust center.
• Coordinate with auditors and ensure timelines and deliverables across engagements.

Skills

ISO 27001

PCI DSS

SOC 2

NIST CSF

Policy development

GRC leadership

Auditing

Cross-functional comms

Vendor management

Education

CISA

CISSP

CISM

CRISC

ISO 27001 Lead Auditor/Implementer

Tools

AuditBoard CrossComply

Vanta

Drata

Jira

Confluence

SafeBase

Job description

Lyft seeks a senior security/compliance professional to own a portfolio of multi-program compliance efforts, ensuring enterprise promises and contractual commitments around security and privacy across NA, EU, and UK. You will manage external audits, automate evidence collection, and advise stakeholders on complex regulatory requirements.

You will partner with Engineering, Legal, Privacy, and Sales to translate risk into actionable guidance, aligning cross-functional teams and driving proactive