Risk Reporting, Quantification & Governance Specialist (Global) - Washington DC, LA, NYC or Mountain View

TikTok

Washington, DC

Why you should apply for a job with TikTok:

Employee well-being is supported via hybrid work, short-term counseling through our EAP and a premium subscription to Headspace.
We embrace diversity across all dimensions and provide employees with 9 employee resource groups globally, including our WOMEN ERG.
Comprehensive parental leave policy as well as fertility treatment through healthcare providers with a $20,000 lifetime maximum.

Get jobs straight to your inbox

Anonymous company reviews, virtual recruiting events, and a supportive community for women when you sign up.

#2JML

Position summary

TikTok is the leading destination for short-form mobile video. Our mission is to inspire creativity and bring joy. TikTok has global offices, including Los Angeles, New York, London, Paris, Berlin, Dubai, Mumbai, Singapore, Jakarta, Seoul, and Tokyo. The Global Security Organization provides industry leading security and privacy services to ByteDance globally. Our organization uses four principles that guide our strategic and tactical operations. First, we champion trust and transparency, leading the charge in organizational transparency and execution of security and privacy capabilities that drive customer trust. Second, we are a business catalyst and enabler, embodying the DNA of technical innovation. Third, we drive risk informed and empowered decision making, giving our business leaders the information needed to make key decisions. Finally, we proactively identify and reduce risk while enabling innovative product development – to consistently build sustainable world-class security capabilities. As a direct report to the Risk Reporting, Quantification, and Governance Lead, you will be a part of the Integrated Risk, Controls, and Compliance Assurance team within the Global Security Organization. Your team will be primarily responsible for developing and maintaining a program that produces governance over risk maturity and operating models. In addition, the team will be responsible for the management of the information security risk framework, quantification of risks, and reporting to help drive informed decision making. Responsibilities: - Assist in developing and delivering strategic integrated risk reporting and the implementation of risk quantification programs in alignment with organizational requirements and overall security program - Collaborate with other team members to identify, define, collect, and report relevant risk metrics - Create and manage persona based risk dashboards and report based (operational teams, executive leaderships, cross-functional stakeholders) - Contribute to executive risk review meetings as needed Required: - Bachelor’s degree in risk or equivalent privacy, security, compliance, project management, analytics, or like discipline from an accredited college/university or measurable knowledge/experience from proven industry, military, defense, or government operations. - 3+ years of risk management experience in a relevant industry including technology, entertainment, etc. - A highly motivated individual, with strong communication and relationship-building skills, and demonstrate a record of ongoing accomplishment and commitment to excellence - Experience in risk management principles including risk identification, prioritization, treatment, classification, and monitoring - Experience executing control evaluation and management processes in a fast paced, technical environment - Experience working hands-on with cross-functional teams including legal, procurement, information security, business continuity, privacy, and IT engineering while assessing processes, risks, and implementing controls to develop a culture of risk-informed decision making - The candidate must have excellent communication skills and be a self-starter who is capable of independently and proactively identifying gaps and developing actionable solutions. - The candidate must have expert skills in risk management lifecycle including risk identification, analysis, treatment, monitoring, and reporting. Preferred: - Experience with security program development and transformation including risk management, policy and standards, and control implementation - Familiarity with information security controls, industry standard frameworks, and data protection regulations such as NIST 800-53, ISO 27001, CIS Top 20, GDPR, CCPA, etc. - Experience with risk quantification tooling, such as XAnalytics or Quantum - Demonstrated capacity to make quick, intelligent, and justified decisions in the face of ambiguity. - Industry relevant certification CRISC, CISA, CISM, CISSP, etc. TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We believe individuals shouldn't be disadvantaged because of their background or identity, but instead should be considered based on their strengths and experience. We are passionate about this and hope you are too. TikTok is committed to providing reasonable accommodations during our recruitment process. If you need assistance or accommodation, please reach out to us at [email protected]

What are TikTok perks and benefits

Lactation facilities

Fertility

Unconscious bias training

Networking

Succession planning

Diversity recruiting

Diversity performance

Short term disability

Paid paternity

Paid maternity

Paid adoptive

About the company

TikTok

Industry: Technology: Consumer Internet

As the leading destination for short-form mobile video, our platform helps people around the world become a part of a global community. In a world that feels more divided than ever, we are here to inspire creativity and bring joy. We do this by embracing change, thriving in ambiguity, and always looking for solutions.

Why you should apply for a job with TikTok:

Employee well-being is supported via hybrid work, short-term counseling through our EAP and a premium subscription to Headspace.
We embrace diversity across all dimensions and provide employees with 9 employee resource groups globally, including our WOMEN ERG.
Comprehensive parental leave policy as well as fertility treatment through healthcare providers with a $20,000 lifetime maximum.