Content Assurance Controls Analyst - USDS

Responsibilities

The USDS Security & Privacy - Risk & Compliance team is responsible for managing USDS security compliance in accordance with US compliance requirements and objectives, and providing industry leading governance, risk, and compliance services.

The core service offerings include: Compliance & Security Risk Management, Controls & Certifications, Security Compliance Policies, Charters, & Protocols, Vendor Program & Third-Party Risk Management, Governance, Risk, & Compliance (GRC) Platform, and Security & Compliance Behavior & Culture.

In order to enhance collaboration and cross-functional partnerships, among other things, at this time, our organization follows a hybrid work schedule that requires employees to work in the office 3 days a week, or as directed by their manager/department. We regularly review our hybrid work model, and the specific requirements may change at any time.

TikTok is seeking a Content Assurance Controls Analyst to be part of the US Security & Privacy Risk and Compliance team that will manage and oversee the control environment. Content Assurance refers to the management of content integrity, safety, and policy adherence across the platform to ensure alignment with TikTok's guidelines and promote trust and safety commitments. This candidate will be responsible for:

- Collaborating with cross-functional control owners (security, privacy, engineering, trust & safety, etc.) to test the design and implementation of Content Assurance controls, and ensure alignment with organizational standards.
- Evaluating the design, implementation, and effectiveness of Content Assurance controls by performing walkthroughs, evidence collection, and testing the controls to ensure effectiveness.
- Developing and maintaining standardized testing methodologies and reporting mechanisms to ensure consistent execution of controls testing.
- Identifying control gaps, assessing the severity of findings, and working with owners to develop and track remediation plans.

Qualifications

Minimum Qualifications:
- 2+ years of experience in controls testing functions, preferably in areas involving content assurance, trust & safety, or security/compliance assessments.
- Strong understanding of Content Assurance industry standards / best practices and testing controls, including control design assessment, evidence evaluation, and testing.
- Practitioner or hands-on experience in a Content Assurance or Trust & Safety function with the desire to utilize it in a controls/compliance capacity.
- Demonstrated ability to gather technical and procedural evidence from stakeholders, coordinate reviews, and assess controls against requirements.
- Strong analytical and problem-solving skills, including experience with identifying control gaps and working with control owners on remediation.
- Excellent collaboration skills, with experience working across multiple functions and cross-functional stakeholders.

Preferred Qualifications:
- Foundational knowledge in Content Assurance/Moderation or security domains (AI/ML, Data Science, Identity and Access Management, Configuration Management, Vulnerability Management, Incident Management, or a related field) and familiarity with technologies and tool stacks across these domains
- Familiar with the usage of modern GRC tooling (i.e., Archer, ServiceNow, etc.)
- One of the following certifications, or equivalent certifications: CISA, CISSP, CISM, CRISC, etc.
- Previous experience working with engineering teams and the ability to communicate control requirements to a variety of audience
- Strong writing and documentation skills; clear and concise

Job Information

[For Pay Transparency] Compensation Description (annually)