About TikTok

TikTok is the leading destination for short-form mobile video. At TikTok, our mission is to inspire creativity and bring joy. TikTok's global headquarters are in Los Angeles and Singapore, and we also have offices in New York City, London, Dublin, Paris, Berlin, Dubai, Jakarta, Seoul, and Tokyo.

Why Join Us

Inspiring creativity is at the core of TikTok's mission. Our innovative product is built to help people authentically express themselves, discover and connect - and our global, diverse teams make that possible. Together, we create value for our communities, inspire creativity and bring joy - a mission we work towards every day.

We strive to do great things with great people. We lead with curiosity, humility, and a desire to make impact in a rapidly growing tech company. Every challenge is an opportunity to learn and innovate as one team. We're resilient and embrace challenges as they come. By constantly iterating and fostering an "Always Day 1" mindset, we achieve meaningful breakthroughs for ourselves, our company, and our users. When we create and grow together, the possibilities are limitless. Join us.

Diversity & Inclusion

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

Job Highlights

• Career growth opportunity
• Flat organization
• 100+ mil users

Responsibilities

Team introduction:
TikTok is seeking a highly adaptable and motivated Senior Analyst to bolster our data sovereignty controls testing program. As a key member of our Data Protection Solutions team, you will play a crucial role in ensuring the privacy and security of our regional data by executing on data sovereignty testing strategy and contributing to the improvement of technical controls across prioritized technology solutions.

You will collaborate closely with various teams, including Legal, Global Security, and Security Engineering, to help ensure continued compliance with data privacy regulations and the implementation of robust security measures, in all stages of solution development. This role reports to the Data Sovereignty Solutions Lead within PnS's Data Protection Solutions team.

Responsibilities:

• Stay up-to-date with evolving data sovereignty and regionalization requirements (e.g., GDPR, cross-border transfer requirements) and translate these requirements into discrete testing procedures, specific to applicable regions and controls
• Collaborate with engineers and product owners to assess systems in the design stage, providing a testing framework for short and long-term testing of applicable data sovereignty and regionalization controls, bespoke to their technologies
• After implementation, continue with ongoing testing of applicable data sovereignty and regionalization controls as products and systems expand or mature
• Where possible, develop automated testing mechanisms to reduce manual effort and increase program maturity in a sustainable manner

Qualifications

Minimum Qualifications:

• In-depth knowledge of data privacy regulations and standards, such as GDPR, CCPA, or other global data protection laws
• Strong understanding of:
  Cross-border data transfers
  Data security and data privacy concepts
  Penetration testing or red team exercises
  Data encryption, tokenization, masking, and redaction
• Strong critical thinking and technical analysis skills to apply to documentation review or testing design
• Demonstrate ability to quickly assimilate to new knowledge and remain current on new developments in data sovereignty, data regionalization and data privacy

Preferred Qualification:

• Bachelors' Degree or industry equivalent work experience
• Minimum 5 years experience working in cybersecurity, security engineering, or privacy engineering
• Relevant certifications:
  CIPP/E
  CISSP
• Understanding of:
  Cloud security and architecture
  Privacy enhancing technologies
  System design and application development practices
  Common testing frameworks, such as the MITRE ATT&CK framework
• Strong communication skills to collaborate with cross-functional teams (both technical and non-technical), influence without authority, and persuade priorities, objectives, and controls to stakeholders
• Demonstrated ability to work effectively in environments of ambiguity and constant change