Data Compliance and Access Operations Senior Analyst

TikTok is the leading destination for short-form mobile video. At TikTok, our mission is to inspire creativity and bring joy.

TikTok's global headquarters are in Los Angeles and Singapore, and its offices include New York, London, Dublin, Paris, Berlin, Dubai, Jakarta, Seoul, and Tokyo.

Why Join UsCreation is the core of TikTok's purpose. Our platform is built to help imaginations thrive. This is doubly true of the teams that make TikTok possible.

Together, we inspire creativity and bring joy - a mission we all believe in and aim towards achieving every day. To us, every challenge, no matter how difficult, is an opportunity;

to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always. At TikTok, we create together and grow together.

That's how we drive impact - for ourselves, our company, and the communities we serve. Join us. The Global Security Organization provides industry leading security and privacy services to ByteDance globally.

Our organization uses four principles that guide our strategic and tactical operations. First, we champion trust and transparency, leading the charge in organizational transparency and execution of security and privacy capabilities that drive customer trust.

Second, we are a business catalyst and enabler, embodying the DNA of technical innovation. Third, we drive risk informed and empowered decision making, giving our business leaders the information needed to make key decisions.

Finally, we proactively identify and reduce risk while enabling innovative product development to consistently build sustainable world-class security capabilities.

TikTok is seeking a Senior Analyst for Access Approval Operations to be part of the Data Protection team and will be responsible for overseeing operations and management of data access and data transfer requests to ensure they are in compliance with relevant company policy, geographical regulation, contractual commitments, and confidentiality requirements.

This role reports directly to the Access Management and Compliance Lead within the Global Security Organization. The candidate must be skilled in conducting technical analysis of access policies, rules, and permissions as well as evaluating appropriateness of roles and transactions.

The candidate must also have the ability to communicate well, motivate and lead cross-functional teams independently, participate in coordinating response and defensive actions as it relates to identity and access assurance, and disseminate security information as appropriate in support of TikTok's critical business, go to market, and operational infrastructure needs.

The candidate will develop, select, and motivate highly effective employees to execute TikTok's business model. Responsibilities- Design and implement data access requirements and controls as necessitated by business needs and regulations- Design the organization's role-based access control scheme and rationalize existing groups- Design and implement the access review process, ensuring that access is reviewed regularly, both for appropriateness of access as well as privilege levels for all users- Understand the access management policies and procedures and the implications on TikTok's business model- Build and review technical and functional requirements for in-house or external technologies to support access management and assurance needs- Interact with users to define access standards and / or necessary modifications to new or existing access policies or roles in support of data security standards- Evaluate access request business justifications to align with the principle of least privilege and defined policies for access approvals- Understand defined data categories and data transfer rules, and the implications on TikTok's regional regulatory obligations- Evaluate business requests for data transfer based on interoperable needs, to align with regional legal and regulatory requirement- Serve as access management liaison and interact with cross-business line applicants to communicate access standards and / or gather required information- Design, implement and maintain new review procedures and continually update internal documentation involving new regulatory, company, and reporting requirements - Establish, track and report operational metrics to senior leadership - Address emergency access related matters reported within on-calls- Coordinate escalations and address any blockers to appropriate cross-business line stakeholders- Use privileged access management (PAM) tools

Data classification and concepts of data minimization - Access management tools, processes, and procedures - User access administration, role and policy-based access controls, including identity management, provisioning and de-provisioning access - Access reviews for appropriateness and authorization - Interpretation of numeric data and statistical principles - Familiarity with regulatory data privacy landscape (.

GDPR, CCPA)- Ability to design and queries, database access management across multiple types (., MySQL, Redis, MongoDB) Preferred Qualifications- 4 years experience working in cybersecurity or information security- Understanding of data classification and concepts of data minimization, access management tools, processes, and procedures- Experience with user access administration, role and policy-based access controls, including identity management, provisioning and de-provisioning access, access reviews for appropriateness and authorizationInterpretation of numeric data and statistical principlesIndustry standard frameworks & IAM tools- Familiarity with regulatory data privacy landscape (.

GDPR, CCPA)- Must have ability to design and queries, database access management across multiple types (., MySQL, Redis, MongoDB)