## **About Uber** We’re changing the way people think about transportation. Not that long ago we were just an app to request premium black cars in a few metropolitan areas. Now we’re a part of the logistical fabric of more than 600 cities around the world. Whether it’s a ride, a sandwich, or a package, we use technology to give people what they want, when they want it. For the people who drive with Uber, our app represents a flexible new way to earn money. For cities, we help strengthen local economies, improve access to transportation, and make streets safer. **About the Role** The Global Public Safety team's mission is to drive community safety, safeguard our data and deliver actionable insights through market leading engagement with public safety agencies. As a risk operations manager, you will focus and strengthen Public Safety’s execution on risk management objectives by onboarding and maintaining our eGRC risk management and compliance program, as well as own key controls that protect our data and meet our global regulatory requirements. The ideal candidate is an experienced risk management professional who can translate work across safety, regulatory and compliance teams seamlessly and act as conduit between Public Safety’s GRC function, Public Safety’s Global Response Operations, Liaison Program, Tech team, Safety, Legal and the business. **The Impact You'll Have** - Develop and maintain the risk management program that supports a team handling a large volume of incoming requests from law enforcement and public health authorities. This includes: - Onboard and maintain Public Safety’s risk management program to Uber’s eGRC (ServiceNow) software that supports the monitoring and tracking of Public Safety’s compliance with applicable laws, terms of service and law enforcement guidelines and responds to risk and compliance activities including regulatory requests for information, data incident management, audits, governance, data security, business continuity planning, tooling systems and transparency reporting. - Develop and monitor risk and compliance related infrastructure and artifacts including an XFN operating model, risk register, transparency report guidelines, and/or control matrix. - Drive the execution of risk and compliance related activities primarily focused on designing and testing controls in partnership with GRC’s existing compliance program. - Collaborate with stakeholders to define the programs goals, obtain prioritised deliverables, develop and execute project plans and measure program impact across Public Safety with minimal assistance. - Support efforts to set and develop standards for risk identification and classification, measurement, risk appetite. and treatment strategies. Operationalize risk processes. - Develop and manage updates to and refinement of risk dashboards used for reporting to senior management. - Review and monitor key program metrics and escalate or define corrective actions for critical deviations.  Identification of risks and detailing of mitigation plans to ensure that projects stay on track, or are brought back on track in the event of delays or blockers. - Own key controls to bolster Public Safety’s risk and controls framework. - Ensure policy documents are generated in accordance with agreed internal processes and standards, are submission ready, and are appropriately archived in the agreed document management system. Identify gaps in strategy, systems, and processes to support growth at scale. - Draft policy-related materials including reports, propose documentation updates, develop documentation based on legal guidance, create instructional content, with the ability to proof, revise, and edit copy to ensure both accuracy and quality of content, convert complex ideas and concepts into easily understood documentation. - Engage and build relationships with cross-functional teams and stakeholders to ensure that development and operational readiness requirements are understood and implemented. - Be part of a global team located across the US, LATAM, EU and APAC and work across multiple timezones. **The Experience You'll Bring** - A minimum of 5+ years in trust & safety, risk operations and/or risk management in security organisations. - Minimum Bachelor's degree. Concentration in Technology, Risk Management, Business or a related field is a plus. - Experience with eGRC and/or second line of defence compliance programming. - Risk management experience within a large multinational tech company and/or highly matrixed environment. - Be detail-oriented and draft policies that are polished and ready for review by senior management. - Work independently with minimal direct supervision. - Be part of a global team located across the US, LATAM, EU and APAC and work across multiple timezones. **Preferred Qualification** - Experience in law enforcement policy and risk-assessment, drafting regulatory language, and a knowledge of privacy and data security principals. - Experience working on risk assessments, transparency reports, responses to regulators or other external parties, audits, and/or designing controls specific to meet regulatory expectations. - Experience working at a tech company or with tech clients in a program management capacity across risk management, trust & safety and/or compliance functions. - Experience with partnering, both within the team and with a wide range of internal partners across a global organisation. - Experience working collaboratively with cross-functional teams. - Proficient in managing and resolving complex problems and issues. Experience with using judgment in handling sensitive matters and experience maintaining confidentiality - Possess a demonstrated interest or experience in law enforcement, international affairs, security, business continuity, or crisis management. We welcome people from all backgrounds who seek the opportunity to help build a future where everyone and everything can move independently. If you have the curiosity, passion, and collaborative spirit, work with us, and let’s move the world forward, together. Offices continue to be central to collaboration and Uber’s cultural identity. Unless formally approved to work fully remotely, Uber expects employees to spend at least half of their work time in their assigned office. For certain roles, such as those based at green-light hubs, employees are expected to be in-office for 100% of their time. Please speak with your recruiter to better understand in-office expectations for this role. \*Accommodations may be available based on religious and/or medical conditions, or as required by applicable law. To request an accommodation, please reach out to [accommodations@uber.com](mailto:accommodations@uber.com).