TikTokNew York 10001
Full Time
||none||Enterprise Security Data Protection Lead||TikTok|| ||||https://careers.tiktok.com/position/7262017588649298231/detail">

Enterprise Security Data Protection Lead

Full Time Tick Tock Diner NY, 481 8th Ave, New York, NY 10001, United States


TikTok is the leading destination for short-form mobile video. Our mission is to inspire creativity and bring joy. TikTok has global offices including Los Angeles, New York, London, Paris, Berlin, Dubai, Singapore, Jakarta, Seoul and Tokyo. Why Join Us Creation is the core of TikTok's purpose. Our platform is built to help imaginations thrive. This is doubly true of the teams that make TikTok possible. Together, we inspire creativity and bring joy - a mission we all believe in and aim towards achieving every day. To us, every challenge, no matter how difficult, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always. At TikTok, we create together and grow together. That's how we drive impact - for ourselves, our company, and the communities we serve. Join us. The Global Security Organization provides industry-leading cybersecurity and business protection services to TikTok globally. Our organization employs four principles that guide our strategic and tactical operations. Firstly, we Champion Transparency & Trust by leading the charge in organizational transparency, prioritizing customer trust, and placing user needs first. Secondly, we aim to maintain Best in Class Global Security by proactively identifying and reducing risks while enabling innovative product development. We constantly work towards a sustainable world-class security capability. Thirdly, we strive to be a Business Catalyst & Enabler by embodying the DNA of technical innovation and ensuring our Global Security operations are fast and agile. Finally, we Drive Empowered & Risk-Informed Decision Making by providing our leaders with the necessary information to make agile decisions based on risk. In order to enhance collaboration and cross-functional partnerships, our organization follows a hybrid work schedule that requires employees to work in the office for 3 days a week, as directed by their manager. We regularly review our hybrid work model, and the specific requirements may change at any time. Tiktok is seeking a motivated, mission-oriented Enterprise Data Protection Lead that has deep knowledge and understanding of data protection and security laws and requirements in various regions. In this newly created role as the Lead, you will help TikTok mature its enterprise data protection capabilities, including via the development of policies and standards, operational processes, and enterprise-wide control implementation and validation. You will have primary responsibility for oversight and day-to-day management of TikTok's Security Enterprise Data Protection program. Responsibilities - Set and design the security strategy to enable the protection of enterprise data including data types such as (but not limited to) employee, finance, intellectual property, customers, marketing and sales, business performance, systems, etc. - Inform and advise the Company of obligations under data protection laws. Requires in-depth experience and expertise with the details and practical application of significant regional data protection laws (such as GDPR, CCPA, etc.) and its implementation in corresponding geographies. - Provide written, detailed, technical requirements to enable systemic development for data protection and compliance across the enterprise. - Assist in regular assessments and audits of ongoing compliance with data protection requirements. - Assist in privacy and security risk assessments, best practices and gap analysis, privacy and information security certifications. - Implement data protection policies, procedures, and training materials and promote a culture of data protection compliance across business functions. - Proactively engage with business stakeholders to understand their data protection needs and requirements; assist in the design of solutions to enable advanced protection capabilities. - Communicate proactively, simply and effectively with employees, leadership, data subjects, data protection authorities, works councils, and other controllers and processors across national boundaries and cultures. - Serve as the internal and external point of contact for enterprise data protection and help to inform data subjects, regulatory inquiries, audits and other projects. - Build strong, cross-functional relationships - Stay up-to-date with emerging security threats, industry trends, and regulatory changes relevant to business requirements. - Other assigned duties as necessary to ensure excellent security services and risk mitigation across the business.