TikTok
Responsibilities
Review risk intakes from internal and external data sources and identify trends, patterns, and vectors of data privacy risk affecting US user data to drive treatment prioritization and assessment activities
Support the development, implementation, and documentation of the privacy risk intake and analysis program and corresponding processes in adherence with security principles and industry frameworks. Draft operating procedures and document the engagement model with internal partners to drive effective collaboration
Develop quantitative metrics, dashboards, and reporting to support risk rating justifications
Support the management and communication of the privacy risk taxonomy and leveling criteria with partner teams and leadership and align with security risk findings and analysis
Drive automation and efficiency in data collection and review functions to facilitate accurate and timely risk factors reviews
Engage in special projects and additional responsibilities may be needed as the team expands and capabilities are enhanced
Qualifications Minimum Qualifications:
Bachelor’s degree in Information Security, Data Science, Law, or a related field. Candidates with significant relevant experience in security, privacy and data protection fields will also be considered in lieu of a formal degree.
Hands‑on experience conducting control validation, risk assessments and tracking remediation plans. 5+ years relevant technical experience, such as in risk management, product compliance management, privacy compliance.
Knowledge of global and US privacy regulations, GDPR, COPPA, CCPA, etc.
Excellent fundamental knowledge of industry standards frameworks (NIST Privacy Framework, ISO/IEC 27701, NIST RMF, ISO 31000, COBIT, IAPP guidelines, etc.)
Demonstrated analytical, problem solving, teamwork and collaboration skills in leading or contributing to multi‑functional teams.
Preferred Qualifications:
CISSP, CIPP, CIPT, CIPM, or CRISC is a plus.
Cyber security, information security, or privacy engineering experience in R&D setting.
If you do not have privacy risk management experience but have strong cyber security and risk management experience, we encourage you to apply.
Security or privacy engineering experience is highly desired. Take your technical knowledge to the enterprise level and have a bigger impact.
About USDS TikTok is the leading destination for short‑form mobile video. Our mission is to inspire creativity and bring joy. U.S. Data Security ("USDS") is a subsidiary of TikTok in the U.S. This new, security‑first division was created to bring heightened focus and governance to our data protection policies and content assurance protocols to keep U.S. users safe. Our focus is on providing oversight and protection of the TikTok platform and U.S. user data, so millions of Americans can continue turning to TikTok to learn something new, earn a living, express themselves creatively, or be entertained. The teams within USDS that deliver on this commitment daily span across Trust & Safety, Security & Privacy, Engineering, User & Product Ops, Corporate Functions and more.
Data Security Statement This role requires the ability to work with and support systems designed to protect sensitive data and information. As such, this role will be subject to strict national security‑related screening.
Diversity & Inclusion TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.
USDS Reasonable Accommodation USDS is committed to providing reasonable accommodations in our recruitment processes for candidates with disabilities, pregnancy, sincerely held religious beliefs or other reasons protected by applicable laws. If you need assistance or a reasonable accommodation, please reach out to us at https://tinyurl.com/USDS-RA
Job Information Compensation Description (Annually): The base salary range for this position in the selected city is $98,800 - $196,000 annually. Compensation may vary outside of this range depending on a number of factors, including a candidate’s qualifications, skills, competencies and experience, and location. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work, and this role may be eligible for additional discretionary bonuses/incentives, and restricted stock units. Benefits may vary depending on the nature of employment and the country work location. Employees have day one access to medical, dental, and vision insurance, a 401(k) savings plan with company match, paid parental leave, short‑term and long‑term disability coverage, life insurance, wellbeing benefits, among others. Employees also receive 10 paid holidays per year, 10 paid sick days per year and 17 days of Paid Personal Time (prorated upon hire with increasing accruals by tenure). The Company reserves the right to modify or change these benefits programs at any time, with or without notice. For Los Angeles County (unincorporated) Candidates: Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state, and local laws including the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.
Seniority Level
Associate
Employment Type
Full‑time
Job Function
Other
Industries
Technology, Information and Internet
#J-18808-Ljbffr
Review risk intakes from internal and external data sources and identify trends, patterns, and vectors of data privacy risk affecting US user data to drive treatment prioritization and assessment activities
Support the development, implementation, and documentation of the privacy risk intake and analysis program and corresponding processes in adherence with security principles and industry frameworks. Draft operating procedures and document the engagement model with internal partners to drive effective collaboration
Develop quantitative metrics, dashboards, and reporting to support risk rating justifications
Support the management and communication of the privacy risk taxonomy and leveling criteria with partner teams and leadership and align with security risk findings and analysis
Drive automation and efficiency in data collection and review functions to facilitate accurate and timely risk factors reviews
Engage in special projects and additional responsibilities may be needed as the team expands and capabilities are enhanced
Qualifications Minimum Qualifications:
Bachelor’s degree in Information Security, Data Science, Law, or a related field. Candidates with significant relevant experience in security, privacy and data protection fields will also be considered in lieu of a formal degree.
Hands‑on experience conducting control validation, risk assessments and tracking remediation plans. 5+ years relevant technical experience, such as in risk management, product compliance management, privacy compliance.
Knowledge of global and US privacy regulations, GDPR, COPPA, CCPA, etc.
Excellent fundamental knowledge of industry standards frameworks (NIST Privacy Framework, ISO/IEC 27701, NIST RMF, ISO 31000, COBIT, IAPP guidelines, etc.)
Demonstrated analytical, problem solving, teamwork and collaboration skills in leading or contributing to multi‑functional teams.
Preferred Qualifications:
CISSP, CIPP, CIPT, CIPM, or CRISC is a plus.
Cyber security, information security, or privacy engineering experience in R&D setting.
If you do not have privacy risk management experience but have strong cyber security and risk management experience, we encourage you to apply.
Security or privacy engineering experience is highly desired. Take your technical knowledge to the enterprise level and have a bigger impact.
About USDS TikTok is the leading destination for short‑form mobile video. Our mission is to inspire creativity and bring joy. U.S. Data Security ("USDS") is a subsidiary of TikTok in the U.S. This new, security‑first division was created to bring heightened focus and governance to our data protection policies and content assurance protocols to keep U.S. users safe. Our focus is on providing oversight and protection of the TikTok platform and U.S. user data, so millions of Americans can continue turning to TikTok to learn something new, earn a living, express themselves creatively, or be entertained. The teams within USDS that deliver on this commitment daily span across Trust & Safety, Security & Privacy, Engineering, User & Product Ops, Corporate Functions and more.
Data Security Statement This role requires the ability to work with and support systems designed to protect sensitive data and information. As such, this role will be subject to strict national security‑related screening.
Diversity & Inclusion TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.
USDS Reasonable Accommodation USDS is committed to providing reasonable accommodations in our recruitment processes for candidates with disabilities, pregnancy, sincerely held religious beliefs or other reasons protected by applicable laws. If you need assistance or a reasonable accommodation, please reach out to us at https://tinyurl.com/USDS-RA
Job Information Compensation Description (Annually): The base salary range for this position in the selected city is $98,800 - $196,000 annually. Compensation may vary outside of this range depending on a number of factors, including a candidate’s qualifications, skills, competencies and experience, and location. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work, and this role may be eligible for additional discretionary bonuses/incentives, and restricted stock units. Benefits may vary depending on the nature of employment and the country work location. Employees have day one access to medical, dental, and vision insurance, a 401(k) savings plan with company match, paid parental leave, short‑term and long‑term disability coverage, life insurance, wellbeing benefits, among others. Employees also receive 10 paid holidays per year, 10 paid sick days per year and 17 days of Paid Personal Time (prorated upon hire with increasing accruals by tenure). The Company reserves the right to modify or change these benefits programs at any time, with or without notice. For Los Angeles County (unincorporated) Candidates: Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state, and local laws including the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.
Seniority Level
Associate
Employment Type
Full‑time
Job Function
Other
Industries
Technology, Information and Internet
#J-18808-Ljbffr