Internal Audit Manager

At Lyft, our purpose is to serve and connect. We aim to achieve this by cultivating a work environment where all team members belong and have the opportunity to thrive. We’re looking for a proactive, collaborative Manager of Internal Audit to help execute our internal audit program and support Lyft’s governance, risk management, and compliance efforts. This role will focus on both business and technology audits, helping identify and address key risks while delivering insights that enable informed decision-making. Reporting to the Director of Internal Audit, and based in our San Francisco HQ, you’ll work closely with stakeholders across the company to strengthen controls, improve processes, and drive continuous improvement. Responsibilities: Audit Execution & Risk-Based Planning Execute audit and advisory engagements spanning across both technology (e.g. cybersecurity, data governance, infrastructure, etc.) and business (e.g. operations, compliance, etc.) domains from end to end — including planning, fieldwork, testing, and reporting. Perform annual risk assessment over assigned risks to develop and refine the annual risk-based audit plan. Take a hands-on approach to audits, ensuring findings are data-driven, relevant, and aligned with business objectives. Use process improvement techniques (e.g. process mapping, root cause analysis, gap assessments) to identify opportunities for enhanced control design and operational efficiency. Perform risk assessments and identify areas for process improvement, control enhancement, or technology enablement. Ensure timely and effective follow-up on remediation of audit findings, coordinating with business owners to verify resolution. Collaborate with cross-functional teams — including Engineering, Security, Legal, Finance, and Compliance — to assess risks and test key controls. Stay current on evolving risks related to emerging technologies, regulatory changes, and internal initiatives. Enterprise Risk Management (ERM) Support the enhancement of Lyft’s Enterprise Risk Management (ERM) program, working closely with management to identify, assess, and manage emerging enterprise risks. Collaborate with cross-functional teams to ensure alignment between audit efforts and ERM objectives, ensuring risks are identified early and effectively mitigated. Provide actionable insights to help integrate ERM frameworks into business processes and strategic decision-making. Assist in evaluating the effectiveness of risk mitigation efforts and contribute to enterprise-wide risk reporting. Collaboration & Continuous Improvement Build strong, trust-based relationships with stakeholders to drive accountability and promote a culture of risk awareness. Collaborate with and manage co-sourced audit partners to ensure quality, consistency, and timely execution of audit activities. Champion the use of agile audit practices, data analytics, and automation to enhance audit quality and efficiency. Contribute to the development and continuous improvement of Internal Audit methodologies, tools, and templates. Experience: Bachelor’s degree in Business, Finance, Information Systems, or a related field (CIA, CPA, CISA, or other relevant certifications a plus) 5–7 years of experience in internal audit, risk advisory, or compliance, ideally within a fast-paced, tech-enabled environment Experience conducting audits across both technology and business domains Strong understanding of internal controls, risk management frameworks, and auditing standards (e.g., IIA) Familiarity with tech-related risks such as cybersecurity, cloud infrastructure, data privacy, and third-party risk management Intellectually curious and adaptable, with a continuous improvement mindset and comfort navigating organizational change Strong analytical and problem-solving skills; comfort working with data and systems Excellent verbal and written communication skills, with the ability to translate technical findings into business-relevant insights Proven ab…