Senior Privacy Analyst

Lyft Lyft · Consumer · Toronto, ON · Security & Privacy

Lyft is seeking a Senior Privacy Analyst to join their Privacy team. This role will focus on ensuring data privacy is built into products by design, conducting privacy risk assessments, advising stakeholders, and developing privacy policies and technical controls. The ideal candidate will have deep knowledge of privacy concepts, experience with privacy regulations, and a strong technical background.

What you'd actually do

  1. Conduct privacy risk assessments of new and existing Lyft products, services, and processes
  2. Build strong cross-functional relationships with product and engineering teams and advise them on complex data privacy-related issues
  3. Analyze system designs and data flows to identify and mitigate potential privacy vulnerabilities
  4. Identify trends in privacy and regulatory requirements and compliance enforcement and drive necessary changes in Lyft’s data privacy program
  5. Communicate risk to both technical and non-technical stakeholders across the business and negotiate risk mitigation strategies

Skills

Required

  • Deep knowledge of a broad range of privacy concepts and demonstrated ability to apply them to real-world situations
  • Experience conducting privacy risk assessments, threat modeling, and risk mitigation
  • Experience with technical privacy concepts (e.g., anonymization, encryption, differential privacy)
  • Experience with privacy regulations (e.g., CCPA, GDPR, PIPEDA)
  • Strong technical background and ability to negotiate effectively with engineering teams
  • Strong cross-functional communication and leadership skills, with the ability to initiate and drive projects proactively
  • Strong teamwork and collaboration skills
  • Strong written and verbal communication skills
  • Ability to own and manage multiple tasks and high priority projects

Nice to have

  • Experience with Privacy Enhancing Technologies and development and/or deployment of privacy tooling a plus
  • Code development, review, and maintenance experience in one or more programming languages (e.g., Python, Go, Java, C++) a plus
  • IAPP privacy certifications (e.g., CIPP, CIPM, CIPT) a plus

What the JD emphasized

  • privacy regulations
  • technical privacy concepts
  • privacy risk assessments
  • privacy Enhancing Technologies
  • privacy tooling