Senior Enterprise Security Data Protection Analyst

TikTok is the leading destination for short-form mobile video. At TikTok, our mission is to inspire creativity and bring joy.

TikTok's global headquarters are in Los Angeles and Singapore, and its offices include New York, London, Dublin, Paris, Berlin, Dubai, Jakarta, Seoul, and Tokyo.

Why Join UsCreation is the core of TikTok's purpose. Our platform is built to help imaginations thrive. This is doubly true of the teams that make TikTok possible.

Together, we inspire creativity and bring joy - a mission we all believe in and aim towards achieving every day. To us, every challenge, no matter how difficult, is an opportunity;

to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always. At TikTok, we create together and grow together.

That's how we drive impact - for ourselves, our company, and the communities we serve. Join us. The Global Security Organization provides industry-leading cyber-security and business protection services to TikTok globally.

Our organization employs four principles that guide our strategic and tactical operations. Firstly, we Champion Transparency & Trust by leading the charge in organizational transparency, prioritizing customer trust, and placing user needs first.

Secondly, we aim to maintain Best in Class Global Security by proactively identifying and reducing risks while enabling innovative product development.

We constantly work towards a sustainable world-class security capability. Thirdly, we strive to be a Business Catalyst & Enabler by embodying the DNA of technical innovation and ensuring our Global Security operations are fast and agile.

Finally, we Drive Empowered & Risk-Informed Decision Making by providing our leaders with the necessary information to make agile decisions based on risk.

In order to enhance collaboration and cross-functional partnerships, our organization follows a hybrid work schedule that requires employees to work in the office for 2 to 3 days a week, as directed by their manager.

We regularly review our hybrid work model, and the specific requirements may change at any time. TikTok is seeking a motivated, mission-oriented Senior Enterprise Security Data Protection Analyst with deep knowledge and understanding of data protection and security laws and requirements in various regions.

This individual should also have technical expertise in cloud and on-premises technologies, data architecture (both structured and unstructured) and information security with an emphasis on access management, data discovery and control design and implementation at scale.

You will help TikTok progress its enterprise data protection capabilities, including via the development of policies and standards, operational processes and enterprise-wide control implementation and validation.

You will interact with cross functional teams as a subject matter expert assisting them with data discovery, assessment and technical control design and implementation to meet or exceed global requirements and customer expectations.

Responsibilities- Provide subject matter expertise in helping to set and design security controls to enable the protection of enterprise data including data types such as (but not limited to) employee, finance, intellectual property, customers, marketing and sales, business performance, systems.

• Inform and advise the Company of obligations under data protection laws. Requires in-depth experience and expertise with the details and practical application of significant regional data protection laws (such as GDPR, CCPA, and its implementation in corresponding geographies.
• Provide written, detailed, technical requirements to enable systemic development for data protection and compliance across the enterprise.
• Proactively engage with business stakeholders to understand their data protection needs and requirements; assist in the design of solutions to enable advanced protection capabilities.
• Communicate proactively, simply and effectively with employees, leadership, data subjects, data protection authorities, works councils, and other controllers and processors across national boundaries and cultures.
• Serve as the internal point of contact for enterprise data protection and help to inform data subjects, regulatory inquiries, audits and other project needs from cross-functional partner teams.
• Stay up-to-date with emerging security threats, industry trends, and regulatory changes relevant to business requirements.
• Proven experience in data protection security controls, compliance and risk assessments, ideally in the social media, entertainment or technology sector.
• Experience advising internal stakeholders around data protection requirements, questions, risks, and issues. - Ability to prioritize and undertake mission critical tasks in a fast-paced environment- Excellent verbal and written communication skills, with the ability to convey complex security concepts to non-technical stakeholders, and leaders.
• Demonstrated experience teaching complex concepts by breaking them down into easy-to-understand pieces to increase adoption and provide solutions for common security scenarios.

Preferred Qualifications- Bachelors’ Degree or industry equivalent work experience - 5 years experience working in technical security, engineering or audit role