About the Team
Uber's Engineering Security team works to ensure the security of information for our full set of users - riders, eaters, drivers, and partners. Our ultimate goal is to ensure that every experience with Uber is simple, secure, and safe. We are seeking a dedicated Cyber Security Assurance Analyst to join our Security Risk & Compliance (SRC) team within Engineering Security!
About the Role
The Cybersecurity Assurance Analyst is responsible for evaluating the controls, security measures, and governance practices against Uber's IT systems and infrastructure. The role is crafted to raise informative recommendations for improving the security of Uber's information systems based on industrial standards, best practices, federal, and state regulations. The successful candidate is encouraged to have outstanding problem-solving skills, meticulous attention to detail, and a great understanding of cybersecurity trends.
Want more jobs like this?
Get Computer and IT jobs in Amsterdam, Netherlands delivered to your inbox every week.
What you will do
- Conduct assessments to determine deviations from acceptable configurations, policy, or standards, and provide expertise in compliance requirements for internal and external reviews of requirements.
- Advise improvements to policy, procedures, and standards based on control execution gap assessments. Assist in the implementation of required policies, procedures, and configurations; may make recommendations for improvements.
- Design, develop and implement continuous control monitoring techniques in partnership with Uber's system ownership community and drive the implementation of automated control testing at scale.
- Lead monitoring of corrective actions of system audits; may assist in the documentation of Plan of Action and Milestones (POAM).
- Prepare detailed audit reports outlining findings, maturity levels, and recommendations to leadership and relevant stakeholders.
- Develop a strategic plan to periodically audit Uber systems, applications, and infrastructure to support control processes to ensure risk mitigation.
- Assist with the identification and mitigation of risk posed to the confidentiality, integrity, and availability of information systems.
Basic Qualifications
- A degree in information technology/computer information systems or related (essential).
- Certified Information Systems Auditor (CISA) (essential).
- 5+ years of work experience as an IT Auditor (essential).
- Excellent written and verbal communication skills.
- Experience with NIST cybersecurity framework, BSIMM Security model, cloud security, Data Loss Prevention, IDS/IPS, Web-Proxy, and endpoint Security
Preferred Qualifications
- Proven track record in leading IT audits, risk assessments, and control evaluations.
- Demonstrated knowledge of IT audit methodologies and best practices.
- Ability to leverage data analytics to articulate stories in an audit lens.
- Demonstrated ability to apply innovation to the control testing process.
- Strong attention to detail with an analytical mind and outstanding problem-solving skills.
Don't worry if you don't tick all the boxes we would still be interested in hearing from you!
We welcome people from all backgrounds who seek the opportunity to help build a future where everyone and everything can move independently. If you have the curiosity, passion, and collaborative spirit, work with us, and let's move the world forward, together.
Offices continue to be central to collaboration and Uber's cultural identity. Unless formally approved to work fully remotely, Uber expects employees to spend at least half of their work time in their assigned office. For certain roles, such as those based at green-light hubs, employees are expected to be in-office for 100% of their time. Please speak with your recruiter to better understand in-office expectations for this role.
*Accommodations may be available based on religious and/or medical conditions, or as required by applicable law. To request an accommodation, please reach out to accommodations@uber.com.