Program Specialist IV - Security & Compliance
Compliance / Regulatory
Hyderabad, Telangana, India
About the Team
The Security & Compliance Team ensures that Uber’s global BPO network adheres to security and regulatory standards, protecting Uber’s customer data, proprietary information, and operational integrity. We establish policy expectations, compliance processes, and risk governance frameworks to safeguard Uber’s information security landscape.
As a strategic security partner, we work closely with internal teams, external partners, and regulatory stakeholders to assess risks, implement controls, and drive seWe are seeking a highly driven Program Manager to support Vendor Compliance and Access Governance initiatives across Uber’s global BPO network. This role will be responsible for managing critical security, compliance, and access control programs end-to-end, ensuring scalable governance, risk mitigation, and operational excellence across vendor ecosystems.
The ideal candidate will demonstrate strong program management, data analytics, automation, and stakeholder management capabilities, with the ability to operate in a fast-paced, cross-functional environment.
Key Responsibilities
The Security Risk Analyst will serve as the primary gatekeeper for third-party access and the first responder for vendor-related security events.
- Incident Response Coordination: Monitor and triage security alerts related to third-party software and service providers. Act as the liaison between the vendor’s security team and Uber’s internal IR (Incident Response) team.
- Access Governance: Execute and audit the provisioning/deprovisioning of access for third-party entities, ensuring the Principle of Least Privilege (PoLP) is strictly maintained.
- Risk Assessments: Conduct periodic security reviews and "continuous monitoring" of high-risk vendors to ensure they maintain the security posture promised during the initial onboarding.
- Process Automation: Identify opportunities to automate manual provisioning workflows using IAM (Identity and Access Management) tools to reduce human error.
Key Skills & Qualifications
- Data analysis and validation skills (Google Sheets, SQL, or equivalent)
- Experience with automation tools (G-Script, JIRA, Slack workflows)
- Strong understanding of access governance, RBAC, and cybersecurity concepts and frameworks
- Experience managing security incidents
- Ability to work cross-functionally with Security, Engineering, and Operations teams
- Excellent communication and documentation skills
Success in This Role
Success will be defined by the ability to:
- Drive end-to-end program execution across multiple high-impact initiatives
- Improve governance, compliance, and access control maturity
- Build scalable automation and reduce manual dependencies
- Effectively collaborate across global stakeholders and vendor partners
Ready to Ride?
This isn't the kind of place where you follow a playbook — it's where you help write one. If you're driven by impact, energized by challenge, and ready to shape how the world moves — we'd love to hear from you.
You may be eligible for bonuses, equity, and other compensation, as well as a range of benefits. Explore our benefits.
Offices remain key to collaboration and Uber's culture. Unless approved for full remote work, employees must spend at least 50% of their time in-office. Some roles, like those at greenlight hubs, require full-time in-office presence. Ask your Recruiter for details about this role's requirements.
Uber is proud to be an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. If you have a disability or special need that requires accommodation, please let us know by completing this form.