Senior Security Assurance & Compliance Lead

Socotra, Inc.; New York (NY); Hybrid; USD 148,000 - 185,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

Mental health benefits

401(k) with match

Parental leave

Job summary

Lyft is hiring for a Senior Security Compliance role in the Customer Trust team. You will own ISO 27001 and broader regulatory programs, coordinate audits, and advise on risk across North America, the EU, and the UK. The role emphasizes automation, policy development, and collaboration with Engineering, Legal, Privacy, and Sales.

The position is in-office on a hybrid schedule; expect 3 days per week in the office (Mon, Wed, Thu) with flexibility. The NYC base pay range is disclosed to teams.

Qualifications

• 5+ years in security governance, risk, and compliance (GRC) or IT audit.
• 5+ years with ISO 27001 and PCI DSS.
• Knowledge of SOC 2, HIPAA, NIST CSF and EU/UK frameworks.
• Experience managing multi-program compliance across global requirements.
• Strong policy drafting and cross-functional collaboration.

Responsibilities

• Own and lead ISO 27001 compliance end-to-end from planning to surveillance.
• Drive multi-program compliance across SOC 2, PCI DSS, HIPAA, NIST CSF and international frameworks.
• Serve as liaison to auditors, QSAs, and certification bodies.
• Develop and maintain security policies, standards, and procedures.
• Automate evidence collection and testing with tooling; advise on risk.

Skills

Security governance

GRC

IT audit

Policy development

Cross-functional leadership

Communication

Jira

Confluence

AI tooling

LLMs

Tools

AuditBoard CrossComply

Vanta

Drata

SafeBase

Jira

Confluence

Job description

Lyft is hiring for a Senior Security Compliance role in the Customer Trust team. You will own ISO 27001 and broader regulatory programs, coordinate audits, and advise on risk across North America, the EU, and the UK. The role emphasizes automation, policy development, and collaboration with Engineering, Legal, Privacy, and Sales.

The position is in-office on a hybrid schedule; expect 3 days per week in the office (Mon, Wed, Thu) with flexibility. The NYC base pay range is disclosed to teams.