Data Defense Operations Analyst

Join us.

The Global Security Organization provides industry-leading cyber-security and business protection services to TikTok globally. Our organization employs four principles that guide our strategic and tactical operations. Firstly, we Champion Transparency & Trust by leading the charge in organizational transparency, prioritizing customer trust, and placing user needs first. Secondly, we aim to maintain Best in Class Global Security by proactively identifying and reducing risks while enabling innovative product development. We constantly work towards a sustainable world-class security capability. Thirdly, we strive to be a Business Catalyst & Enabler by embodying the DNA of technical innovation and ensuring our Global Security operations are fast and agile. Finally, we Drive Empowered & Risk-Informed Decision Making by providing our leaders with the necessary information to make agile decisions based on risk. In order to enhance collaboration and cross-functional partnerships, our organization follows a hybrid work schedule that requires employees to work in the office for 2 to 3 days a week, as directed by their manager. We regularly review our hybrid work model, and the specific requirements may change at any time.

As a direct report to the Data Defense Lead within Data Protection, you will be a part of the team responsible for Data Defense and Access Assurance (DDAA). As a Data Defense Operations Analyst, you will be responsible for supporting the Data Defense Lead along with a team of cross-functional cyber, privacy, engineering, and data protection analysts to define, implement, manage, and measure controls to protect data in accordance with relevant geographical regulations, contractual commitments, and confidentiality requirements.

Responsibilites
- Execute and troubleshoot data discovery scripts to automate iterative end-to-end processes for identifying sensitive data using scalable, reusable, and configurable frameworks/methodologies
- Manage data inventories and data flow mappings by collecting and aggregating datasets from multiple data source systems
- Perform in-depth data analysis, normalization, and reconciliation using multiple large datasets to identify gaps and trends, manage data quality and integrity, and inform context-based decisions using various information sources
- Streamline, standardize, and document end-to-end process flows and requirements to implement repeatable and iterable procedures and operations
- Define metrics and create/maintain dashboards for measuring and reporting key performance indicators (e.g., coverage, findings and remediations)
- Implement, enforce, and validate processes and policies to identify sensitive, high value data (e.g., consumer data, sensitive data, IP & source code) to ensure appropriate data protection controls are in place and support data security and protect sensitive data-at-rest, in-motion and in-transit (e.g., data classification schema, data disposition requirements, and controls)
- Identify and track remediation activities and issues resulting from data discovery and other data protection risks and manage data discovery remediation workflows
- Conduct data security risk assessments to identify gaps in coverage across environments

Qualifications

- Bachelors' Degree or industry equivalent work experience
- 3-5 years applicable experience
- Strong understanding of database technologies and querying (e.g., SQL, NoSQL) including relational (e.g., MySQL) and non-relational databases/big data (e.g., Hive, Hadoop/HDFS, Redis, Graph, Mongo), message queues (e.g. Kafka, RocketMQ, etc.), Elasticsearch, and cloud services
- Experience with process automation and script development and using one or more programming languages (e.g., Python, Go) and APIs
- Expert in data analysis and familiarity using Python pandas library and RegEx regular expressions
- Familiarity working in Linux environments and command line interfaces
- Demonstrate ability to quickly assimilate to new knowledge and technologies, and remain current on new developments in cybersecurity capabilities and industry knowledge
- Experience collaborating with cross-functional and cross-regional teams to meet strategic and tactical objectives as well as serve as an individual contributor
- In-depth experience in at least 4 of the following areas:
- Data discovery and identification
- Data lifecycle and protection of data throughout
- Data classification and privacy policies
- Data modeling and administration
- Disk, file, device, and database encryption
- Key management/Public Key Infrastructure (PKI)

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.