Security & Data Privacy Analyst

At Lyft, our purpose is to serve and connect. We aim to achieve this by cultivating a work environment where all team members belong and have the opportunity to thrive.

Lyft connects people to transportation to change the way we live and get around our communities. Lyft’s engineering team is growing rapidly, and we are looking for Technical Program Managers to help us scale. Come be part of a new team at Lyft focused on enabling and empowering engineering teams to deliver at scale.

Our drivers and passengers entrust Lyft with their personal information and travel details to get where they are going and expect us to keep that data safe. Lyft’s Privacy team is comprised of engineers and analysts dedicated to ensuring that appropriate data protections are applied at all times. We conduct privacy risk assessments, consult with organizational stakeholders, maintain Lyft’s privacy program, develop privacy policies, and advise on all matters related to privacy.

As a member of the Privacy team you will help ensure that privacy is built into our products by design.  Every day, you’ll meet and work with stakeholders across the company working on exciting new projects, help de-risk their product development, conduct privacy risk assessments, and serve as a trusted privacy adviser to teams across Lyft.

Responsibilities:

• Conduct privacy risk assessments of new and existing Lyft products, services, and processes
• Build strong cross-functional relationships with product and engineering teams and advise them on complex data privacy-related issues
• Analyze system designs and data flows to identify and mitigate potential privacy vulnerabilities
• Identify trends in privacy and regulatory requirements and compliance enforcement and drive necessary changes in Lyft’s data privacy program
• Communicate risk to both technical and non-technical stakeholders across the business and negotiate risk mitigation strategies
• Proactively drive development of privacy infrastructure, technical controls, and automation to make it easy for teams to achieve privacy excellence
• Develop and maintain internal privacy policies, guidelines, and best practices for Lyft

Experience:

• Deep knowledge of a broad range of privacy concepts and demonstrated ability to apply them to real-world situations
• Experience conducting privacy risk assessments, threat modeling, and risk mitigation
• Experience with technical privacy concepts (e.g., anonymization, encryption, differential privacy)
• Experience with privacy regulations (e.g., CCPA, GDPR, PIPEDA)
• Strong technical background and ability to negotiate effectively with engineering teams
• Strong cross-functional communication and leadership skills, with the ability to initiate and drive projects proactively
• Strong teamwork and collaboration skills
• Strong written and verbal communication skills
• Ability to own and manage multiple tasks and high priority projects
• Experience with Privacy Enhancing Technologies and development and/or deployment of privacy tooling a plus
• Code development, review, and maintenance experience in one or more programming languages (e.g., Python, Go, Java, C++) a plus
• IAPP privacy certifications (e.g., CIPP, CIPM, CIPT) a plus

Benefits:

• Extended health and dental coverage options, along with life insurance and disability benefits
• Mental health benefits
• Family building benefits
• Child care and pet benefits
• Access to a Lyft funded Health Care Savings Account
• RRSP plan with company match to help save for your future
• In addition to provincial observed holidays, salaried team members are covered under Lyft's flexible paid time off policy. The policy allows team members to take off as much time as they need (with manager approval). Hourly team members get 15 days paid time off, with an additional day for each year of service 
• Lyft is proud to support new parents with 18 weeks of paid time off, designed as a top-up plan to complement provincial programs. Biological, adoptive, and foster parents are all eligible.
• Subsidized commuter benefits and Lyft ride credits

Lyft is committed to creating an inclusive workforce that fosters belonging. Lyft believes that every person has a right to equal employment opportunities without discrimination because of race, ancestry, place of origin, colour, ethnic origin, citizenship, creed, sex, sexual orientation, gender identity, gender expression, age, marital status, family status, disability, pardoned record of offences, or any other basis protected by applicable law or by Company policy. Lyft also strives for a healthy and safe workplace and strictly prohibits harassment of any kind.  Accommodation for persons with disabilities will be provided upon request in accordance with applicable law during the application and hiring process. Please contact your recruiter if you wish to make such a request.

Lyft highly values having employees working in-office to foster a collaborative work environment and company culture. This role will be in-office on a hybrid schedule — Team Members will be expected to work in the office at least 3 days per week, including on Mondays, Wednesdays, and Thursdays. Lyft considers working in the office at least 3 days per week to be an essential function of this hybrid role. Your recruiter can share more information about the various in-office perks Lyft offers. Additionally, hybrid roles have the flexibility to work from anywhere for up to 4 weeks per year. #Hybrid

The expected base pay range for this position in the Toronto area is CAD $136,000 - CAD $170,000, not inclusive of potential equity offering, bonus or benefits. Salary ranges are dependent on a variety of factors, including qualifications, experience and geographic location. Your recruiter can share more information about the salary range specific to your working location and other factors during the hiring process.

Lyft may use artificial intelligence to screen applicants, however, Lyft employees make the ultimate selection and hiring decisions.

This job fills an existing vacancy.