Senior Privacy Analyst

Lyft Lyft · Consumer · Toronto, ON · Security & Privacy

Lyft is seeking a Senior Privacy Analyst to join their Privacy and Compliance Team. The role involves conducting privacy risk assessments, advising on data protection, developing policies, and ensuring privacy-by-design in products. The analyst will also drive operational excellence, develop program metrics, and collaborate with product and engineering teams. Experience with privacy regulations and security compliance frameworks is required.

What you'd actually do

  1. Drive operational excellence across the privacy team by streamlining workflows, eliminating redundancies, and building scalable processes that improve team efficiency and output quality
  2. Develop and track meaningful program metrics to establish accountability, measure effectiveness, and communicate program health to leadership and cross-functional stakeholders
  3. Build and maintain team expertise in tooling and operations software, ensuring consistent adoption and optimal utilization across the program
  4. Conduct privacy risk assessments of new and existing Lyft products, services, and processes
  5. Assess third parties for security and data protection controls, and provide risk assessments and mitigation recommendations

Skills

Required

  • Knowledge of a broad range of privacy concepts and demonstrated ability to apply them to real-world situations
  • Experience conducting privacy risk assessments, third party risk assessments, and and risk mitigation
  • Experience with privacy regulations (e.g., CCPA, GDPR, PIPEDA)
  • Experience with security compliance frameworks (ISO 27001, PCI-DSS, SOC 2)
  • Experience using Jira for project and task tracking, reporting, and program performance monitoring
  • Experience driving operational improvements within a privacy, security, compliance, or risk function, including process design, metrics development, and tooling adoption
  • Strong cross-functional communication and leadership skills, with the ability to initiate and drive projects proactively
  • Strong teamwork and collaboration skills
  • Strong organizational skills and attention to detail
  • Strong written and verbal communication skills
  • Ability to own and manage multiple tasks and high priority projects

Nice to have

  • IAPP privacy certifications (e.g., CIPP, CIPM, CIPT) a plus

What the JD emphasized

  • privacy regulations
  • security compliance frameworks
  • privacy risk assessments
  • third party risk assessments