Internal Audit Manager

At Lyft, our purpose is to serve and connect. We aim to achieve this by cultivating a work environment where all team members belong and have the opportunity to thrive. We’re looking for a proactive, collaborative Manager of Internal Audit to help execute our internal audit program and support Lyft’s governance, risk management, and compliance efforts. This role will focus on both business and technology audits, helping identify and address key risks while delivering insights that enable informed decision-making. Reporting to the Director of Internal Audit, and based in our San Francisco HQ, you’ll work closely with stakeholders across the company to strengthen controls, improve processes, and drive continuous improvement. Responsibilities: Audit Execution and Risk-Based Planning Execute audit and advisory engagements spanning across both technology (e.g. cybersecurity, data governance, infrastructure, etc.) and business (e.g. operations, compliance, etc.) domains from end to end — including planning, fieldwork, testing, and reporting. Perform annual risk assessment over assigned risks to develop and refine the annual risk-based audit plan. Take a hands-on approach to audits, ensuring findings are data-driven, relevant, and aligned with business objectives. Use process improvement techniques (e.g. process mapping, root cause analysis, gap assessments) to identify opportunities for enhanced control design and operational efficiency. Perform risk assessments and identify areas for process improvement, control enhancement, or technology enablement. Ensure timely and effective follow-up on remediation of audit findings, coordinating with business owners to verify resolution. Collaborate with cross-functional teams — including Engineering, Security, Legal, Finance, and Compliance — to assess risks and test key controls. Stay current on evolving risks related to emerging technologies, regulatory changes, and internal initiatives. Enterprise Risk Management (ERM) Support the enhancement of Lyft’s Enterprise Risk Management (ERM) program, working closely with management to identify, assess, and manage emerging enterprise risks. Collaborate with cross-functional teams to ensure alignment between audit efforts and ERM objectives, ensuring risks are identified early and effectively mitigated. Provide actionable insights to help integrate ERM frameworks into business processes and strategic decision-making. Assist in evaluating the effectiveness of risk mitigation