Program Specialist IV - Security & Compliance
Uber
Hyderabad, IndiaPosted about 1 month agoDiscoveredMatch locked
Data and Analytics
About the Team
The
Security & Compliance Team
ensures that Uber's
global BPO network adheres to security and regulatory standards
, protecting Uber's
customer data, proprietary information, and operational integrity
. We establish
policy expectations, compliance processes, and risk governance frameworks
to safeguard Uber's information security landscape.
As a
strategic security partner
, we work closely with
internal teams, external partners, and regulatory stakeholders
to assess risks, implement controls, and drive security awareness. We are seeking a highly driven Program Manager to support Vendor Compliance and Access Governance initiatives across Uber's global BPO network.
The ideal candidate will demonstrate strong program management, data analytics, automation, and stakeholder management capabilities, with the ability to operate in a fast-paced, cross-functional environment.
Key Responsibilities
The
Security Risk Analyst
will serve as the primary gatekeeper for third-party access and the first responder for vendor-related security events.
•
Incident Response Coordination
Monitor and triage security alerts related to third-party software and service providers. Act as the liaison between the vendor's security team and Uber's internal IR (Incident Response) team.
•
Access Governance
Execute and audit the provisioning/deprovisioning of access for third-party entities, ensuring the
Principle of Least Privilege (PoLP)
is strictly maintained.
•
Risk Assessments
Conduct periodic security reviews and \"continuous monitoring\" of high-risk vendors to ensure they maintain the security posture promised during the initial onboarding.
•
Process Automation
Identify opportunities to automate manual provisioning workflows using IAM (Identity and Access Management) tools to reduce human error.
Key Skills & Qualifications
- Data analysis and validation skills (Google Sheets, SQL, or equivalent)
- Experience with automation tools (G-Script, JIRA, Slack workflows)
- Strong understanding of access governance, RBAC, and cybersecurity concepts and frameworks
- Experience managing security incidents
- Ability to work cross-functionally with Security, Engineering, and Operations teams
- Excellent communication and documentation skills
Success in This Role
Success will be defined by the ability to:
- Drive end-to-end program execution across multiple high-impact initiatives
- Improve governance, compliance, and access control maturity
- Build scalable automation and reduce manual dependencies
- Effectively collaborate across global stakeholders and vendor partners
Ready to Ride?
This isn't the kind of place where you follow a playbook - it's where you help write one. If you're driven by impact, energized by challenge, and ready to shape how the world moves - we'd love to hear from you.
You may be eligible for bonuses, equity, and other compensation, as well as a range of benefits. Explore our benefits.
Offices remain key to collaboration and Uber's culture. Unless approved for full remote work, employees must spend at least 50% of their time in-office. Some roles, like those at greenlight hubs, require full-time in-office presence. Ask your Recruiter for details about this role's requirements.
Uber is proud to be an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. If you have a disability or special need that requires accommodation, please let us know by completing this form.
Not included in the source posting: what you'll do, benefits.
Skills
cybersecurityiamjirasql
Who can apply
The employer didn't state any visa, work authorization, citizenship or clearance requirements in this posting. Confirm with the employer before applying.
Read automatically from the employer's posting text. Always confirm with the employer — requirements can change after a job is published.