Security and Privacy Incident Manager

TikTok

San Jose, CA

Why you should apply for a job to TikTok:

4/5 in supportive management

Ratings are based on anonymous reviews by Fairygodboss members.

Employee well-being is supported via hybrid work, short-term counseling through our EAP and a premium subscription to Headspace.

We embrace diversity across all dimensions and provide employees with 9 employee resource groups globally, including our WOMEN ERG.

Comprehensive parental leave policy as well as fertility treatment through healthcare providers with a $20,000 lifetime maximum.

#A24555

Position summary

TikTok is the leading destination for short-form mobile video. Our mission is to inspire creativity and bring joy. TikTok has global offices, including Los Angeles, New York, London, Paris, Berlin, Dubai, Mumbai, Singapore, Jakarta, Seoul, and Tokyo. Why Join Us At TikTok, our people are humble, intelligent, compassionate and creative. We create to inspire - for you, for us, and for more than 1 billion users on our platform. We lead with curiosity and aim for the highest, never shying away from taking calculated risks and embracing ambiguity as it comes. Here, the opportunities are limitless for those who dare to pursue bold ideas that exist just beyond the boundary of possibility. Join us and make impact happen with a career at TikTok. The Global Security Organization provides industry-leading cyber-security and business protection services to TikTok globally. Our organization employs four principles that guide our strategic and tactical operations. Firstly, we Champion Transparency & Trust by leading the charge in organizational transparency, prioritizing customer trust, and placing user needs first. Secondly, we aim to maintain Best in Class Global Security by proactively identifying and reducing risks while enabling innovative product development. We constantly work towards a sustainable world-class security capability. Thirdly, we strive to be a Business Catalyst & Enabler by embodying the DNA of technical innovation and ensuring our Global Security operations are fast and agile. Finally, we Drive Empowered & Risk-Informed Decision Making by providing our leaders with the necessary information to make agile decisions based on risk. In order to enhance collaboration and cross-functional partnerships, our organization follows a hybrid work schedule that requires employees to work in the office for 2 to 3 days a week, as directed by their manager. We regularly review our hybrid work model, and the specific requirements may change at any time. We are seeking a Regional Security & Privacy Incident Manager to join our Global Security Team. The Regional Security and Privacy Incident Manager (SPIM) is responsible for coordinating, managing, and resolving time sensitive enterprise security and privacy incident escalations. During incidents, the SPIM is responsible for leading incident management across impacted business stakeholders, ensuring transparent communication, tracking issues, assigning tasks, and driving responders to rapid and effective incident resolution. This will involve working closely with business stakeholders and various cross functional incident response teams, such as Threat Detection & Response, Intelligence Services, Security, Safety, Data, Systems, Privacy Legal, Government Relations, Communications, Infrastructure Engineering, Operations and Business Resilience. During steady-state (i.e., non-incident times), this role will facilitate cross-functional preparedness training, drills and exercises, risk tracking, threat monitoring and readiness planning. This will require maintaining a deep understanding of the enterprise threat landscape and ensuring that the appropriate plans, processes and playbooks are operationally ready to respond to any enterprise security and privacy risks. Responsibilities - Align and operationalize incident management plans across technologies, capabilities, and services. - Lead cross-functional incident response teams during business or service disruptions. - Advise, guide, and direct regional business and security leaders and stakeholders on incident management strategy and execution. - Support executive and corporate-level business operations owners during enterprise-wide security and privacy related disruptions. - Support business impact and severity reporting based on investigations, incident data or data analysis. - Collaborate and partner with peer Incident Managers across the regions to deliver consistent and effective incident management standards globally. - Define, train, and assess cross-functional incident responders based on incident management standards, processes, and protocols. - Facilitate cross-functional preparedness planning, training and exercises. - Coordinate post-incident report findings with the Enterprise Risk team as appropriate. - Willingness to become an expert in TikTok infrastructure, policies, products, tools, systems, and data. - Identify opportunities to improve processes, protocols, and policies at scale to reduce risk. - Bachelor's / Master's degree from an accredited college/university or equivalent work experience in Security, Business Resilience or other relevant crisis management related positions. - Hybrid - 2 days per week are required at the office - At least 6+ years experience in security incident management, security operations, crisis planning and/or preparedness exercises. - Experienced coordinating high-profile, complicated incidents within a highly complex environment such as multi-national corporations (preferred). - Exceptional communication and stakeholder management skills with proven ability to communicate clearly at all leadership levels. - Ownership with exceptional bias for action; self-starter with the ability to work well under pressure to solve problems and meet objectives. - Comfortable managing through ambiguity, making thoughtful and sound judgments during stressful environments. - Experience implementing or assessing the implementation of GDPR, CCPA, or equivalent privacy regulation. - Flexible to work in support of security and privacy operations with on-call work during an incident. - Some travel may be required. TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too. TikTok is committed to providing reasonable accommodations in our recruitment processes for candidates with disabilities, pregnancy, sincerely held religious beliefs or other reasons protected by applicable laws. If you need assistance or a reasonable accommodation, please reach out to us at [email protected] The base salary range for this position in the selected city is $135000 - $232880 annually.Compensation may vary outside of this range depending on a number of factors, including a candidate’s qualifications, skills, competencies and experience, and location. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work, and this role may be eligible for additional discretionary bonuses/incentives, and restricted stock units.At ByteDance/TikTok our benefits are designed to convey company culture and values, to create an efficient and inspiring work environment, and to support ByteDancers to give their best in both work and life. We offer the following benefits to eligible employees: We cover 100% premium coverage for employee medical insurance, approximately 75% premium coverage for dependents and offer a Health Savings Account(HSA) with a company match. As well as Dental, Vision, Short/Long term Disability, Basic Life, Voluntary Life and AD&D insurance plans. In addition to Flexible Spending Account(FSA) Options like Health Care, Limited Purpose and Dependent Care. Our time off and leave plans are: 10 paid holidays per year plus 17 days of Paid Personal Time Off(PPTO) (prorated upon hire and increased by tenure) and 10 paid sick days per year as well as 12 weeks of paid Parental leave and 8 weeks of paid Supplemental Disability. We also provide generous benefits like mental and emotional health benefits through our EAP and Lyra. A 401K company match, gym and cellphone service reimbursements. The Company reserves the right to modify or change these benefits programs at any time, with or without notice.

Get jobs straight to your inbox

Anonymous company reviews, virtual recruiting events, and a supportive community for women when you sign up.

What are TikTok perks and benefits

Lactation facilities

Fertility

Unconscious bias training

Networking

Succession planning

Diversity recruiting

Diversity performance

Short term disability

Paid paternity

Paid maternity

Paid adoptive

About the company