Sr Security Technologist - Customer Trust

Uber's Engineering Security team ensures information security for our full set of users – riders, eaters, drivers, and partners. Our ultimate goal is to ensure that every experience with Uber is simple, secure, and safe.

We are seeking a Technical Lead Manager to lead our Customer Trust team, part of the Security Risk and Compliance (SRC) function within Engineering Security. Customer Trust is the front door for how Uber's enterprise customers, prospects, and partners understand our security and privacy posture. This is a hands-on leadership role: you will set direction for the team and manage its people while also owning a share of the service delivery yourself – building automation, deploying tooling, and engaging directly with customer security teams.

What You'll Do

• Lead the team and the service
• Own the Customer Trust service end to end: security questionnaires, RFP security and compliance responses, customer assurance artifacts, and the customer-facing trust portal.
• Set and drive strategic goals for the function, and move quickly from idea to shipped improvement. You are expected to innovate, not just maintain.
• Balance and prioritize the team's workload across inbound customer requests, sales-driven deadlines, and improvement projects, so that neither the queue nor the roadmap stalls.
• Manage, coach, and grow the team. Set clear expectations, hold the team accountable for customer outcomes, and develop each member's technical and professional skills.
• Communicate proactively with stakeholders on status, capacity, risk, and priorities. No one should be surprised by where a request or project stands.
• Do the work
• Respond to security questionnaires and the security and compliance portions of RFPs accurately and on time, and speak directly with customer security teams around the world to explain Uber's controls.
• Build automation and integrations that reduce manual effort in intake, triage, response drafting, and artifact maintenance (for example, Slack, ServiceNow, and internal APIs), including AI-assisted response generation and review.
• Deploy and operate security tooling that supports the customer trust workflow, from GRC and RFP platforms to internal-build services.
• Solve complex, ambiguous problems: novel customer requirements, conflicting control interpretations, gaps between what customers ask for and what we can attest to.
• Communicate technical risk to leadership. Translate customer findings, contractual security commitments, and recurring gaps into clear decisions for security, legal, and business leaders.
• Build relationships
• Develop and maintain strong working relationships with Security, Privacy, Legal, Sales, Product, and Compliance so that customer responses are comprehensive, accurate, and aligned.
• Be the credible security voice in the room with customers and account teams, and the credible customer voice in the room with internal security and product teams.
• Maintain deep knowledge of Uber's products, particularly their security, privacy, and compliance features, and drive improvements to sales enablement materials and customer-facing collateral.

Basic Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, Information Systems, or a related field, or equivalent practical experience.
• 6+ years of experience in information security, including 2+ years in a customer trust, security assurance, or GRC-facing role.
• Experience leading a team or workstream, formally or informally, including prioritizing work across competing demands and holding others accountable for outcomes.
• Hands-on scripting or engineering experience (for example, Python, Go, or similar) applied to automating security or compliance workflows, including building integrations against APIs.
• Working knowledge of security controls and common frameworks such as ISO 27001, SOC 2, NIST CSF, and CIS, and the ability to map customer requirements to them.
• Strong written and verbal communication skills, including experience presenting technical risk to non-technical and executive audiences.
• Experience engaging directly with external customer or partner security teams.

Preferred Qualifications

• Prior experience as a people manager or tech lead in a security or compliance function.
• Experience using AI-assisted engineering workflows (code assistants, LLM-based drafting or review) to accelerate delivery.
• Experience building or operating a customer-facing trust portal or trust center.
• Experience drafting and maintaining customer assurance artifacts (for example, SIG, CAIQ, whitepapers, security FAQs).
• Experience with GRC, ticketing, and RFP platforms (for example, ServiceNow, Responsive/RFPIO, Loopio, Vanta, Drata).
• Prior experience in security and compliance at a SaaS, cloud, or platform company operating in multiple international markets.
• Security certifications such as CISSP, CISA, CCSP, or ISO 27001 Lead Implementer.
• You'll Be Successful in This Role If
• You are comfortable building automation and integrations, speaking with customer security teams internationally, solving complex problems, deploying security tooling, leveraging AI-assisted engineering workflows, and communicating technical risk to leadership.
• You enjoy solving technical problems, collaborating across teams, and building practical security solutions in evolving environments, and you are energized by leading a team while still doing the work alongside them.
• For San Francisco, CA-based roles: The base salary range for this role is USD $180,000 per year - USD $200,000 per year.
• For Seattle, WA-based roles: The base salary range for this role is USD $180,000 per year - USD $200,000 per year.
• For all US locations, you will be eligible to participate in Uber's bonus program, and may be offered an equity award & other types of comp. All full-time employees are eligible to participate in a 401(k) plan. You will also be eligible for various benefits.