ZipRecruiter

Log In

1

Security Assurance Analyst Jobs (NOW HIRING)

Lyft

Senior Security Assurance Analyst

New York, NY · On-site

Customer-Facing Assurance * Own responses to customer security questionnaires (e.g., CAIQ, SIG) and ... analysis across audit findings * Certifications & Background * Relevant certifications such as CISA ...

Lyft

Senior Security Assurance Analyst

New York, NY

Customer-Facing Assurance * Own responses to customer security questionnaires (e.g., CAIQ, SIG) and ... analysis across audit findings * Certifications & Background * Relevant certifications such as CISA ...

SWBC

Senior Security Assurance Analyst

San Antonio, TX · On-site

$86K - $113K/yr

... security reviews, control validation, and assurance activities. This role serves as a trusted ... If you enjoy solving complex problems, conducting investigative analysis, working with a wide ...

SWBC

Senior Security Assurance Analyst

San Antonio, TX

$86K - $113K/yr

... security reviews, control validation, and assurance activities. This role serves as a trusted ... If you enjoy solving complex problems, conducting investigative analysis, working with a wide ...

Swbc

Senior Security Assurance Analyst

San Antonio, TX

$86K - $113K/yr

... security reviews, control validation, and assurance activities. This role serves as a trusted ... If you enjoy solving complex problems, conducting investigative analysis, working with a wide ...

Scale AI, Inc.

Security Assurance Lead

Washington, DC · On-site

... gap analysis, evidence collection, ATO packages, and certification timelines, including ... Support customer and stakeholder assurance activities, including security questionnaires, due ...

Sandisk

Product Security Assurance Architect

Milpitas, CA

$74 - $95.75/hr

Threat Modeling & Exploitability Analysis * Evaluate the quality, completeness, and realism of product threat models and challenge assumptions through attacker-informed analysis. * Conduct ...

Sandisk

Product Security Assurance Architect

Milpitas, CA

$74 - $95.75/hr

Threat Modeling & Exploitability Analysis * Evaluate the quality, completeness, and realism of product threat models and challenge assumptions through attacker-informed analysis. * Conduct ...

SOSi

Quality Assurance Analyst

Fort Belvoir, VA · On-site

We deliver tailored solutions, tested leadership, and trusted results to enable national security missions worldwide. Overview: SOSi is seeking a highly qualified Quality Assurance Analyst to join ...

SOSi

Quality Assurance Analyst

Fort Belvoir, VA · On-site

We deliver tailored solutions, tested leadership, and trusted results to enable national security missions worldwide. Overview: SOSi is seeking a highly qualified Quality Assurance Analyst to join ...

next page

Showing results 1-20

All JobsTechnology JobsNetworking JobsCyber Security Administrator JobsSecurity Assurance Analyst Jobs

Security Assurance Analyst information

See salary details

$29.5K

$84.3K

$136.5K

How much do security assurance analyst jobs pay per year?

As of Sep 2, 2026, the average yearly pay for security assurance analyst in the United States is $84,280.00, according to ZipRecruiter salary data. Most workers in this role earn between $34,000.00 and $105,000.00 per year, depending on experience, location, and employer.

What is a security assurance analyst?

A Security Assurance Analyst is a professional responsible for ensuring that an organization's information systems meet established security standards and compliance requirements. They assess potential risks, review policies and procedures, and conduct audits or tests to verify the effectiveness of security controls. Their work helps protect sensitive data and maintain the overall security posture of the organization. Security Assurance Analysts often collaborate with IT, compliance, and risk management teams to identify vulnerabilities and recommend improvements.

What are the key skills and qualifications needed to thrive as a security assurance analyst?

To thrive as a Security Assurance Analyst, you need a solid understanding of information security principles, risk management, and compliance frameworks, often supported by a degree in cybersecurity or a related field. Familiarity with tools like vulnerability scanners, SIEM systems, and certifications such as CISSP or CISA is typically required. Strong analytical thinking, attention to detail, and effective communication skills set top performers apart in this role. These competencies ensure that organizations can proactively identify, assess, and mitigate security risks to protect sensitive data and maintain regulatory compliance.

What are typical challenges security assurance analysts face when working with cross-functional teams?

Security Assurance Analysts often work closely with IT, development, and business teams to ensure security standards are met. A common challenge is translating complex security requirements into actionable steps for colleagues who may have varying levels of security knowledge. Balancing compliance needs with project deadlines can also create tension, requiring strong communication and negotiation skills. Building effective partnerships and fostering a culture of security awareness are key to overcoming these challenges and achieving successful outcomes.

What is the difference between Security Assurance Analyst vs Security Compliance Specialist?

AspectSecurity Assurance AnalystSecurity Compliance Specialist
CertificationsCompTIA Security+, CISSP, CISAISO 27001 Lead Auditor, CISSP, CISA
Work EnvironmentIT security teams, corporate security departmentsRegulatory agencies, corporate compliance teams
Employer & IndustryTech companies, financial institutions, governmentAny industry with regulatory requirements, consulting firms
Primary FocusAssessing security controls, risk management, security assuranceEnsuring compliance with security standards and regulations

The Security Assurance Analyst focuses on evaluating and improving security controls and risk management, while the Security Compliance Specialist ensures adherence to security standards and regulatory requirements. Both roles often collaborate but serve different core functions within security teams.

What cities are hiring for Security Assurance Analyst jobs?

Cities with the most Security Assurance Analyst job openings:

Who are the top companies hiring for Security Assurance Analyst jobs?

The top employers for Security Assurance Analyst jobs are:

What are popular job titles related to Security Assurance Analyst jobs?

For Security Assurance Analyst jobs, the most frequently searched job titles are:

Security Assurance Analyst jobs near you
Infographic showing various Security Assurance Analyst job openings in the United States as of August 2026, with employment types broken down into 88% Full Time, 10% Part Time, and 2% Contract. Highlights an 93% Physical, 2% Hybrid, and 5% Remote job distribution, with an average salary of $84,280 per year, or $40.5 per hour.

Senior Security Assurance Analyst

Lyft

New York, NY • On-site

Full-time

Medical, Dental, Vision, Retirement, PTO

Posted 22 days ago

Lyft rating

7.6

Company rating: 7.6 out of 10

Based on 33 frontline employees who took The Breakroom Quiz

2nd of 9 rated taxi private hire

Job description

At Lyft, our purpose is to serve and connect. We aim to achieve this by cultivating a work environment where all team members belong and have the opportunity to thrive.
Lyft connects people to transportation to change the way we live and get around our communities. Our drivers and passengers entrust Lyft with their personal information and travel details to get where they are going and expect us to keep that data safe. Lyft's Customer Trust team ensures that appropriate security controls and data protections are applied to meet our compliance requirements and customer contractual commitments. We conduct security risk assessments, consult with organizational stakeholders, monitor and continuously improve Lyft's Information Security program, facilitate third-party security audits, work with engineering teams to implement, automate, and monitor security controls, develop policies, and advise on all matters related to information security assurance.
We are looking for a highly motivated, organized, and detail-oriented individual to join our Customer Trust team. As a senior member of this team, you will own a portfolio of concurrent, multi-program compliance efforts and help ensure Lyft meets its enterprise promises and contractual commitments to customers on security and privacy across global markets. You'll manage relationships with external auditors and internal stakeholders, scale our program through efficient processes and automation, and serve as a trusted advisor on technical compliance matters spanning North America, the EU, and the UK.
Responsibilities:
  • Program & Audit Ownership
    • Own and lead our ISO 27001 compliance program end-to-end, from certification planning and internal audit through surveillance cycles and Statement of Applicability updates
    • Drive execution across our multi-program compliance portfolio spanning SOC 2, PCI DSS, HIPAA, and NIST CSF, alongside global and international frameworks including UK Cyber Essentials, Spain ENS, and emerging EU regulations such as the Cyber Resilience Act (CRA), Radio Equipment Directive (RED), and NIS2
    • Serve as the primary liaison to external auditors, QSAs, and certification bodies, managing the full audit lifecycle across concurrent engagements and keeping internal stakeholders aligned on timelines and deliverables
  • Risk, Policy & Stakeholder Advisory
    • Own the Security Risk Management Framework, ensuring risk identification, treatment, and reporting activities are consistently managed, tracked, and communicated across the business
    • Lead the development, review, and maintenance of internal information security and data protection policies, standards, and procedures, and drive policy awareness across the organization
    • Build and maintain strong cross-functional relationships with Engineering, Legal, Privacy, and Sales, advising on complex compliance requirements and translating technical risk into clear, actionable guidance for both technical and non-technical audiences
    • Support review of security provisions in customer contracts, MSAs, and security exhibits, partnering with Legal and Sales to provide clear, actionable security positions during negotiations
  • Evidence, Automation & Tooling
    • Drive evidence collection and continuous control testing using our workflow tools (Jira, Confluence), building scalable and repeatable processes across programs
    • Partner with Engineering to design, implement, and monitor automated evidence collection, continuous control testing, and remediation tracking
    • Leverage AI tools and LLM-based workflows to automate and improve compliance and assurance processes, documentation, and controls - for example accelerating evidence review, policy drafting, control testing, and questionnaire responses - and share effective approaches with the broader team
  • Customer-Facing Assurance
    • Own responses to customer security questionnaires (e.g., CAIQ, SIG) and management of our external trust center (SafeBase), balancing transparency with proportional disclosure
Experience:
  • 5+ years of experience in security governance, risk, and compliance (GRC), IT audit, or a related security assurance role
  • 5+ years of hands-on experience withISO 27001 and PCI DSS
  • In-depth knowledge of other regulatory compliance and related assessments/certifications, including SOC 2, HIPAA, and NIST CSF
  • Experience managing a multi-program compliance portfolio spanning global and international requirements, including EU and UK compliance frameworks, standards, or regulations
  • Experience managing, reviewing, and drafting InfoSec policies and procedures
  • Strong technical background with the ability to communicate and negotiate effectively with engineering teams
  • Excellent cross-functional communication and leadership skills, with the ability to initiate and drive projects proactively and influence prioritization and strategic decisions
  • Ability to manage a large workload and competing priorities amid resourcing constraints and tight deadlines
  • Strong written and verbal communication skills, able to flex across technical, business, and executive audiences
  • Preferred:
    • Framework & Regulatory Knowledge
      • Experience across a combination of two or more of the following: ISO 27001, SOC 2, PCI DSS, SOX ITGC
      • GDPR, EU AI Act, NIS2, or other international privacy/security compliance experience
    • Technical & Program Depth
      • Experience testing, designing, or documenting vulnerability management programs
      • Experience reviewing security provisions in customer contracts (MSAs, DPAs, security addenda) and providing actionable feedback to Legal and Sales
    • Tooling & Automation
      • Experience working with GRC platforms (e.g., AuditBoard CrossComply, Vanta, or Drata), Jira, and SafeBase
      • Experience leveraging AI tools or large language models (LLMs) to automate, improve, or design compliance and assurance processes, documentation, or controls - for example AI-assisted evidence review, policy drafting, questionnaire completion, or pattern analysis across audit findings
    • Certifications & Background
      • Relevant certifications such as CISA, CISSP, CISM, CRISC, or ISO 27001 Lead Auditor/Implementer
      • Big 4 or Big 3 consulting experience
    • Nice to have: scripting and automation skills, experience with cloud technologies such as AWS/GCP/Azure
Benefits:
  • Great medical, dental, and vision insurance options with additional programs available when enrolled
  • Mental health benefits
  • Family building benefits
  • Child care and pet benefits
  • 401(k) plan with company match to help save for your future
  • In addition to 12 observed holidays, salaried team members have discretionary paid time off, hourly team members have 15 days paid time off
  • 18 weeks of paid parental leave. Biological, adoptive, and foster parents are all eligible
  • Subsidized commuter benefits
  • Monthly Lyft credits and complimentary Lyft Pink membership

Lyft is an equal opportunity employer committed to an inclusive workplace that fosters belonging. All qualified applicants will receive consideration for employment without regards to race, color, religion, sex, sexual orientation, gender identity, national origin, disability status, protected veteran status, age, genetic information, or any other basis prohibited by law. We also consider qualified applicants with criminal histories consistent with applicable federal, state and local law.
Lyft highly values having employees working in-office to foster a collaborative work environment and company culture. This role will be in-office on a hybrid schedule - Team Members will be expected to work in the office 3 days per week on Mondays, Wednesdays, and Thursdays. Lyft considers working in the office at least 3 days per week to be an essential function of this hybrid role. Your recruiter can share more information about the various in-office perks Lyft offers. Additionally, hybrid roles have the flexibility to work from anywhere for up to 4 weeks per year. #Hybrid
The expected base pay range for this position in the New York City area is $148,000 - $185,000, not inclusive of potential equity offering, bonus or benefits. Salary ranges are dependent on a variety of factors, including qualifications, experience and geographic location. Your recruiter can share more information about the salary range specific to your working location and other factors during the hiring process.

What Lyft employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Lyft logo

About Lyft

Sourced by ZipRecruiter

At Lyft, our mission is to improve people's lives with the world's best transportation. To do this, we start with our own community by creating an open, inclusive, and diverse organization.

Industry

Ground public transportation

Company size

5,001 - 10,000 Employees

Headquarters location

San Francisco, CA, US

Year founded

2012

Social media

FacebookTwitter

View All Lyft Jobs

Apply