Cybersecurity Controls Analyst - USDS Job at Tik Tok in New York

Responsibilities

• Join the USDS Security Risk & Compliance team to manage and oversee the control environment. Collaborate with cross-functional control owners to consult and provide guidance for the design and implementation of key security and compliance controls. Collect evidence, test, and monitor the control environment to ensure ongoing effectiveness of controls.

Qualifications

• Minimum Qualifications: 2+ years of IT risk and security controls experience with knowledge of IT and security control frameworks (e.g., NIST-CSF, PCI-DSS, ISO 27001, SOC 2, etc.). Bachelors degree in IT Security, Information Security, Cybersecurity or equivalent discipline, or measurable knowledge/experience from proven industry, military, defense, or government operations. Experience in controls evaluation/design and working knowledge of industry standards (ISO 27001, NIST CSF, SOC 2, etc.). Experience performing internal/external control testing as a security control assessor or supporting security compliance as internal compliance, or performing control maturity assessments. Experience gathering technical control evidence from stakeholders, coordinating reviews, and analyzing artifacts to demonstrate compliance. Demonstrated teamwork and collaboration skills, especially in multi-functional teams.
• Preferred Qualifications: Foundational knowledge in IT and security domains (Identity and Access Management, Configuration Management, Vulnerability Management, Incident Management, etc.) and familiarity with technologies and tool stacks across these domains. Familiarity with modern GRC tooling (e.g., Archer, ServiceNow). One of the certifications (or equivalent): CISA, CISSP, CISM, CRISC, etc. Previous experience working with engineering teams and the ability to communicate control requirements to diverse audiences. Strong writing and documentation skills; clear and concise communication.

About USDS

TikTok is the leading destination for short-form mobile video. Our mission is to inspire creativity and bring joy. U.S. Data Security (USDS) is a TikTok subsidiary in the U.S. This security-focused division provides governance to data protection policies and content assurance protocols for U.S. users. The teams within USDS span Trust & Safety, Security & Privacy, Engineering, User & Product Ops, Corporate Functions and more.

Data Security Statement

This role requires working with systems designed to protect sensitive data and information and is subject to strict national security-related screening.

Why Join Us

Inspiring creativity is at the core of TikTok's mission. Our teams are global and diverse, and we strive to create value for communities, inspire creativity, and bring joy. We foster curiosity, humility, and impact within a rapidly growing tech company.

Diversity & Inclusion

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. We celebrate diverse voices and strive to reflect the communities we reach.

USDS Reasonable Accommodation

USDS is committed to providing reasonable accommodations in our recruitment processes for candidates with disabilities and other protected reasons. If you need assistance, please reach out to us at https://tinyurl.com/USDS-RA

Job Information

The base salary range for this position in the selected city is provided by the employer and may vary by location and candidate qualifications. Benefits vary by location and employment type, and typically include health insurance, retirement plans, paid time off, and other wellbeing programs. The company reserves the right to modify benefits at any time.

#J-18808-Ljbffr