**About the Role** The Cybersecurity Assurance Senior Analyst is responsible for evaluating the controls, security measures, and governance practices against Uber’s IT systems and infrastructure.  The role is designed to raise insightful recommendations for enhancing the security of Uber’s information systems based on industrial standards, best practices, federal, and state regulations. The successful candidate is expected to have outstanding problem-solving skills, meticulous attention to detail, and a great understanding of cybersecurity trends. **What the Candidate Will Need / Bonus Points** \-\-\-\- What the Candidate Will Do ---- - Conduct assessments to determine deviations from acceptable configurations, policy, or standards, and provide expertise in compliance requirements for internal and external reviews of requirements. - Advise improvements to policy, procedures, and standards based on control execution gap assessments. Assist in the implementation of required policies, procedures, and configurations; may make recommendations for improvements. - Design, develop and implement continuous control monitoring techniques in partnership with Uber’s system ownership community and drive the implementation of automated control testing at scale. - Lead monitoring of corrective actions of system audits; may assist in the documentation of Plan of Action and Milestones (POAM). - Prepare detailed audit reports outlining findings, maturity levels, and recommendations to leadership and relevant stakeholders. - Develop a strategic plan to periodically audit Uber systems, applications, and infrastructure to support control processes to ensure risk mitigation. - Assist with the identification and mitigation of risk posed to the confidentiality, integrity, and availability of information systems. \-\-\-\- Basic Qualifications ---- - A degree in information technology/computer information systems or related (essential). - **Certified Information Systems Auditor (CISA) (essential)**. - **8+ years of work experience as an IT Auditor (essential).** - Excellent written and verbal communication skills. - Experience with NIST cybersecurity framework, BSIMM Security model, cloud security, Data Loss Prevention, IDS/IPS, Web-Proxy, and endpoint Security \-\-\-\- Preferred Qualifications ---- - Proven track record in leading IT audits, risk assessments, and control evaluations. - Demonstrated knowledge of IT audit methodologies and best practices. - Ability to leverage data analytics to articulate stories in an audit lens. - Demonstrated ability to apply innovation to the control testing process. - Strong attention to detail with an analytical mind and outstanding problem-solving skills. We welcome people from all backgrounds who seek the opportunity to help build a future where everyone and everything can move independently. If you have the curiosity, passion, and collaborative spirit, work with us, and let’s move the world forward, together. Offices continue to be central to collaboration and Uber’s cultural identity. Unless formally approved to work fully remotely, Uber expects employees to spend at least half of their work time in their assigned office. For certain roles, such as those based at green-light hubs, employees are expected to be in-office for 100% of their time. Please speak with your recruiter to better understand in-office expectations for this role. \*Accommodations may be available based on religious and/or medical conditions, or as required by applicable law. To request an accommodation, please reach out to [accommodations@uber.com](mailto:accommodations@uber.com).