Internal Audit Manager

Responsibilities

Audit Execution & Risk-Based Planning

• Execute audit and advisory engagements spanning technology (e.g. cybersecurity, data governance, infrastructure) and business (e.g. operations, compliance) domains from end to end — including planning, fieldwork, testing, and reporting.
• Perform annual risk assessment over assigned risks to develop and refine the annual risk-based audit plan.
• Take a hands-on approach to audits, ensuring findings are data-driven, relevant, and aligned with business objectives.
• Use process improvement techniques (e.g. process mapping, root cause analysis, gap assessments) to identify opportunities for enhanced control design and operational efficiency.
• Perform risk assessments and identify areas for process improvement, control enhancement, or technology enablement.
• Ensure timely and effective follow-up on remediation of audit findings, coordinating with business owners to verify resolution.
• Collaborate with cross-functional teams — including Engineering, Security, Legal, Finance, and Compliance — to assess risks and test key controls.
• Stay current on evolving risks related to emerging technologies, regulatory changes, and internal initiatives.

Enterprise Risk Management (ERM)

• Support the enhancement of Lyft’s Enterprise Risk Management (ERM) program, working closely with management to identify, assess, and manage emerging enterprise risks.
• Collaborate with cross-functional teams to ensure alignment between audit efforts and ERM objectives, ensuring risks are identified early and effectively mitigated.
• Provide actionable insights to help integrate ERM frameworks into business processes and strategic decision-making.
• Assist in evaluating the effectiveness of risk mitigation efforts and contribute to enterprise-wide risk reporting.

Collaboration & Continuous Improvement

• Build strong, trust-based relationships with stakeholders to drive accountability and promote a culture of risk awareness.
• Collaborate with and manage co-sourced audit partners to ensure quality, consistency, and timely execution of audit activities.
• Champion the use of agile audit practices, data analytics, and automation to enhance audit quality and efficiency.
• Contribute to the development and continuous improvement of Internal Audit methodologies, tools, and templates.

Requirements

• Bachelor’s degree in Business, Finance, Information Systems, or a related field (CIA, CPA, CISA, or other relevant certifications a plus)
• 5–7 years of experience in internal audit, risk advisory, or compliance, ideally within a fast-paced, tech-enabled environment
• Experience conducting audits across both technology and business domains
• Strong understanding of internal controls, risk management frameworks, and auditing standards (e.g., IIA)
• Familiarity with tech-related risks such as cybersecurity, cloud infrastructure, data privacy, and third-party risk management
• Intellectually curious and adaptable, with a continuous improvement mindset and comfort navigating organizational change
• Strong analytical and problem-solving skills; comfort working with data and systems
• Excellent verbal and written communication skills, with the ability to translate technical findings into business-relevant insights
• Proven ability to manage multiple projects and meet deadlines in a dynamic environment
• High integrity, curiosity, and a collaborative mindset

Benefits

• Great medical, dental, and vision insurance options with additional programs available when enrolled
• Mental health benefits
• Family building benefits
• Child care and pet benefits
• 401(k) plan with company match
• Discretionary paid time off (salaried team members); 15 days paid time off (hourly team members); 12 observed holidays
• 18 weeks of paid parental leave (biological, adoptive, and foster parents eligible)
• Subsidized commuter benefits
• Monthly Lyft credits and complimentary Lyft Pink membership