Head of Global Security Legal

Responsibilities

The Global Security Legal team is seeking a highly experienced, bright and capable team leader. The team plays a central role in helping TikTok and its parent company, ByteDance build, scale, and operate information security governance frameworks across the globe. We partner closely with operational, engineering, product, and legal stakeholders across the organization to develop practical solutions that support innovation while protecting user and company data.

The team's core functions include translating evolving legal and regulatory requirements into scalable processes, standards, and governance structures that can be implemented across products, functions, and regions; partnering cross-functionally to respond to privacy and security incidents and events; and developing strategies to mitigate emerging legal risks in the AI space.

Responsibilities:
- Manage a team of legal professionals within the information security, physical security, and incident response vertical on the Global Privacy and Security Legal team
- Oversee and manage the day to day legal support for incident response, covering information security, privacy, safety, and other breaches and incidents
- Advise on the development and implementation of information security and data protection policies and processes
- Provide thought leadership on security-related regulatory and litigation matters that may impact the company
- Collaborate with security teams on matters relating to data assurance, data protection, threat defense, risk management, and regulatory compliance
- Work with legal and product teams globally to review products, features, new applications and initiatives to provide legal risk mitigation strategies and ensure legal compliance for products from an information security perspective
- Provide support to procurement and commercial teams with respect to information security aspects of contract and relationship discussions with third parties
- Coordinate with legal, information security, trust & safety, privacy & data protection, and other cross-functional colleagues on all matters related to information security and incident response, including communication, policy development, and enforcement aspects

Qualifications

Minimum Qualification(s):
- Bachelor's degree and Juris Doctorate from an ABA accredited law school (or foreign equivalent) with membership in good standing in a US State Bar.
- Extensive experience leading global teams of legal professionals and providing legal counsel in enterprise technology or leading consumer-facing digital applications.
- Information security and incident response experience within a major global technology company; background in data privacy matters preferred.
- Proven experience advising on cyber risks, remediation, cybersecurity standards, frameworks, risk assessments, and certification processes.
- Extensive experience working with international teams in various time zones in a cross-functional environment.
- Detail-oriented with strong drafting, documentation, presentation, and communication skills in a cross-functional and global role.
- Highly motivated and proactive, with the ability to multitask, collaborate, understand complex technical issues, and produce results in an ever-changing legal and regulatory environment.

Job Information

[For Pay Transparency] Compensation Description (annually)

The base salary range for this position in the selected city is $210600 - $520800 annually.

Compensation may vary outside of this range depending on a number of factors, including a candidate's qualifications, skills, competencies and experience, and location. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work, and this role may be eligible for additional discretionary bonuses/incentives, and restricted stock units.

Benefits may vary depending on the nature of employment and the country work location. Employees have day one access to medical, dental, and vision insurance, a 401(k) savings plan with company match, paid parental leave, short-term and long-term disability coverage, life insurance, wellbeing benefits, among others. Employees also receive 10 paid holidays per year, 10 paid sick days per year and 17 days of Paid Personal Time (prorated upon hire with increasing accruals by tenure).

The Company reserves the right to modify or change these benefits programs at any time, with or without notice.

For Los Angeles County (unincorporated) Candidates:

Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state, and local laws including the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Our company believes that criminal history may have a direct, adverse and negative relationship on the following job duties, potentially resulting in the withdrawal of the conditional offer of employment:

1. Interacting and occasionally having unsupervised contact with internal/external clients and/or colleagues;

2. Appropriately handling and managing confidential information including proprietary and trade secret information and access to information technology systems; and

3. Exercising sound judgment.

Responsibilities

Responsibilities

The Global Security Legal team is seeking a highly experienced, bright and capable team leader. The team plays a central role in helping TikTok and its parent company, ByteDance build, scale, and operate information security governance frameworks across the globe. We partner closely with operational, engineering, product, and legal stakeholders across the organization to develop practical solutions that support innovation while protecting user and company data.

The team's core functions include translating evolving legal and regulatory requirements into scalable processes, standards, and governance structures that can be implemented across products, functions, and regions; partnering cross-functionally to respond to privacy and security incidents and events; and developing strategies to mitigate emerging legal risks in the AI space.

Responsibilities:
- Manage a team of legal professionals within the information security, physical security, and incident response vertical on the Global Privacy and Security Legal team
- Oversee and manage the day to day legal support for incident response, covering information security, privacy, safety, and other breaches and incidents
- Advise on the development and implementation of information security and data protection policies and processes
- Provide thought leadership on security-related regulatory and litigation matters that may impact the company
- Collaborate with security teams on matters relating to data assurance, data protection, threat defense, risk management, and regulatory compliance
- Work with legal and product teams globally to review products, features, new applications and initiatives to provide legal risk mitigation strategies and ensure legal compliance for products from an information security perspective
- Provide support to procurement and commercial teams with respect to information security aspects of contract and relationship discussions with third parties
- Coordinate with legal, information security, trust & safety, privacy & data protection, and other cross-functional colleagues on all matters related to information security and incident response, including communication, policy development, and enforcement aspects

Qualifications

Qualifications

Minimum Qualification(s):
- Bachelor's degree and Juris Doctorate from an ABA accredited law school (or foreign equivalent) with membership in good standing in a US State Bar.
- Extensive experience leading global teams of legal professionals and providing legal counsel in enterprise technology or leading consumer-facing digital applications.
- Information security and incident response experience within a major global technology company; background in data privacy matters preferred.
- Proven experience advising on cyber risks, remediation, cybersecurity standards, frameworks, risk assessments, and certification processes.
- Extensive experience working with international teams in various time zones in a cross-functional environment.
- Detail-oriented with strong drafting, documentation, presentation, and communication skills in a cross-functional and global role.
- Highly motivated and proactive, with the ability to multitask, collaborate, understand complex technical issues, and produce results in an ever-changing legal and regulatory environment.