Sr Security Technologist - Customer Trust

Uber Technologies Inc.; San Francisco (CA); On-site; USD 180,000 - 200,000; Full time

Job summary

Uber Technologies Inc. is seeking a Technical Lead Manager to lead the Customer Trust team within the Security Risk and Compliance function.

This hands-on leadership role will set direction, manage people, and also contribute to service delivery by building automation, deploying tooling, and engaging with customer security teams. You will own security questionnaires, RFP responses, customer assurance artifacts, and the customer-facing trust portal while driving strategic goals, prioritizing

Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, Information Systems, or related field, or equivalent practical experience.
• 6+ years of information security experience, including 2+ years in customer trust/security assurance/GRC-facing roles.
• Experience leading a team or workstream and prioritizing across competing demands.
• Hands-on scripting or engineering experience (Python, Go) for automating security/workflows and building API integrations.
• Knowledge of ISO 27001, SOC 2, NIST CSF, CIS; ability to map customer requirements to them.
• Strong written and verbal communication; experience presenting risk to executives.
• Experience engaging with external customer or partner security teams.

Responsibilities

• Lead the Customer Trust service end-to-end: questionnaires, RFP responses, artifacts, and the customer-facing trust portal.
• Set and drive strategic goals; innovate beyond maintenance.
• Balance workload across customer requests, sales deadlines, and improvement projects.
• Coach and grow the team; set expectations and develop skills.
• Communicate status, capacity, risk, and priorities with stakeholders.
• Respond to security questionnaires and RFPs; converse with customer security teams worldwide.
• Build automation/integrations (Slack, ServiceNow, APIs) including AI-assisted responses.
• Deploy and operate security tooling to support the customer trust workflow.
• Translate customer findings into decisions for security, legal, and business leaders.
• Develop relationships with Security, Privacy, Legal, Sales, Product, and Compliance.

Skills

Scripting

Automation

API integrations

Security controls mapping

GRC familiarity

Executive communication

Customer engagement

Education

Bachelor's degree in CS/CE/IS or equivalent practical experience

Tools

ServiceNow

RFP platforms

Vanta

Job description

Uber's Engineering Security team ensures information security for our full set of users – riders, eaters, drivers, and partners. Our ultimate goal is to ensure that every experience with Uber is simple, secure, and safe.

We are seeking a Technical Lead Manager to lead our Customer Trust team, part of the Security Risk and Compliance (SRC) function within Engineering Security. Customer Trust is the front door for how Uber's enterprise customers, prospects, and partners understand our security and privacy posture. This is a hands‑on leadership role: you will set direction for the team and manage its people while also owning a share of the service delivery yourself – building automation, deploying tooling, and engaging directly with customer security teams.

What You'll Do

Lead the team and the service

• Own the Customer Trust service end to end: security questionnaires, RFP security and compliance responses, customer assurance artifacts, and the customer‑facing trust portal.
• Set and drive strategic goals for the function, and move quickly from idea to shipped improvement. You are expected to innovate, not just maintain.
• Balance and prioritize the team's workload across inbound customer requests, sales‑driven deadlines, and improvement projects, so that neither the queue nor the roadmap stalls.
• Manage, coach, and grow the team. Set clear expectations, hold the team accountable for customer outcomes, and develop each member's technical and professional skills.
• Communicate proactively with stakeholders on status, capacity, risk, and priorities. No one should be surprised by where a request or project stands.

Do the work

• Respond to security questionnaires and the security and compliance portions of RFPs accurately and on time, and speak directly with customer security teams around the world to explain Uber's controls.
• Build automation and integrations that reduce manual effort in intake, triage, response drafting, and artifact maintenance (for example, Slack, ServiceNow, and internal APIs), including AI‑assisted response generation and review.
• Deploy and operate security tooling that supports the customer trust workflow, from GRC and RFP platforms to internal‑build services.
• Solve complex, ambiguous problems: novel customer requirements, conflicting control interpretations, gaps between what customers ask for and what we can attest to.
• Communicate technical risk to leadership. Translate customer findings, contractual security commitments, and recurring gaps into clear decisions for security, legal, and business leaders.

Build relationships

• Develop and maintain strong working relationships with Security, Privacy, Legal, Sales, Product, and Compliance so that customer responses are comprehensive, accurate, and aligned.
• Be the credible security voice in the room with customers and account teams, and the credible customer voice in the room with internal security and product teams.
• Maintain deep knowledge of Uber's products, particularly their security, privacy, and compliance features, and drive improvements to sales enablement materials and customer‑facing collateral.

Basic Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, Information Systems, or a related field, or equivalent practical experience.
• 6+ years of experience in information security, including 2+ years in a customer trust, security assurance, or GRC‑facing role.
• Experience leading a team or workstream, formally or informally, including prioritizing work across competing demands and holding others accountable for outcomes.
• Hands‑on scripting or engineering experience (for example, Python, Go, or similar) applied to automating security or compliance workflows, including building integrations against APIs.
• Working knowledge of security controls and common frameworks such as ISO 27001, SOC 2, NIST CSF, and CIS, and the ability to map customer requirements to them.
• Strong written and verbal communication skills, including experience presenting technical risk to non‑technical and executive audiences.
• Experience engaging directly with external customer or partner security teams.

Preferred Qualifications

• Prior experience as a people manager or tech lead in a security or compliance function.
• Experience using AI‑assisted engineering workflows (code assistants, LLM‑based drafting or review) to accelerate delivery.
• Experience building or operating a customer‑facing trust portal or trust center.
• Experience drafting and maintaining customer assurance artifacts (for example, SIG, CAIQ, whitepapers, security FAQs).
• Experience with GRC, ticketing, and RFP platforms (for example, ServiceNow, Responsive/RFPIO, Loopio, Vanta, Drata).
• Prior experience in security and compliance at a SaaS, cloud, or platform company operating in multiple international markets.
• Security certifications such as CISSP, CISA, CCSP, or ISO 27001 Lead Implementer.

You’ll Be Successful in This Role If

You are comfortable building automation and integrations, speaking with customer security teams internationally, solving complex problems, deploying security tooling, leveraging AI‑assisted engineering workflows, and communicating technical risk to leadership.

You enjoy solving technical problems, collaborating across teams, and building practical security solutions in evolving environments, and you are energized by leading a team while still doing the work alongside them.

For San Francisco, CA-based roles: The base salary range for this role is USD $180,000 per year - USD $200,000 per year.

For Seattle, WA-based roles: The base salary range for this role is USD $180,000 per year - USD $200,000 per year.

For all US locations, you will be eligible to participate in Uber's bonus program, and may be offered an equity award & other types of comp. All full‑time employees are eligible to participate in a 401(k) plan. You will also be eligible for various benefits.

Ready to Ride?

This isn't the kind of place where you follow a playbook — it's where you help write one. If you're driven by impact, energized by challenge, and ready to shape how the world moves — we'd love to hear from you.

You may be eligible for bonuses, equity, and other compensation, as well as a range of benefits.

Offices remain key to collaboration and Uber's culture. Unless approved for full remote work, employees must spend at least 50% of their time in‑office. Some roles, like those at greenlight hubs, require full‑time in‑office presence. Ask your Recruiter for details about this role's requirements.

Uber is proud to be an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. If you have a disability or special need that requires accommodation, please let us know by completing this form.