Access Assurance Operations Senior Analyst - GSO

At TikTok, we create together and grow together. That's how we drive impact - for ourselves, our company, and the communities we serve.
Join us.

The Global Security Organization provides industry leading security and privacy services to ByteDance globally. Our organization uses four principles that guide our strategic and tactical operations. First, we champion trust and transparency, leading the charge in organisational transparency and execution of security and privacy capabilities that drive customer trust. Second, we are a business catalyst and enabler, embodying the DNA of technical innovation. Third, we drive risk informed and empowered decision making, giving our business leaders the information needed to make key decisions. Finally, we proactively identify and reduce risk while enabling innovative product development - to consistently build sustainable world-class security capabilities.

Responsibilities
- Design global access management program that addresses data residency and fine-grained, role-based access requirements and controls as necessitated by business need and regulations
- Build and review technical and functional requirements for in-house or external technologies to support access management and assurance needs, including applying appropriate security measures
- Design and implement the access review process, ensuring that access is reviewed regularly both for appropriateness of access as well as privilege levels for all users
- Implement and enforce mechanisms to proactively monitor, respond and report on inappropriate data access events
- Interact with users to define access standards and/or necessary modifications to new or existing access policies or roles in support of data security standards
- Develop and maintain data residency and data access requirements and controls as necessitated by business needs and regulations
- Develop use cases and integrate access management technologies with related cybersecurity technologies (e.g., security incident and event management, data classification, vulnerability management)
- Lead interactions with Risk and Compliance to understand control requirements and provide information to support findings for non-compliance with internal security policies
- Responsible for designing and reporting key metrics and visualizations for weekly, monthly and bimonthly cadences across multiple audiences

Qualifications

Qualifications:
- Bachelors' Degree or industry equivalent work experience
- 4-5 years applicable experience
- Demonstrate ability to quickly assimilate to new knowledge and remain current on new developments in cybersecurity capabilities and industry knowledge
- Experience building and growing a team to meet strategic and tactical objectives; mentoring and coaching staff
- In-depth experience in designing and deploying access management technologies and controls in enterprise-class organizations, including the following:

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.