Data Loss Prevention Operations Analyst

The Global Security Organization provides industry-leading cyber-security and business protection services to TikTok globally. Our organization employs four principles that guide our strategic and tactical operations. Firstly, we Champion Transparency & Trust by leading the charge in organizational transparency, prioritizing customer trust, and placing user needs first. Secondly, we aim to maintain Best in Class Global Security by proactively identifying and reducing risks while enabling innovative product development. We constantly work towards a sustainable world-class security capability. Thirdly, we strive to be a Business Catalyst & Enabler by embodying the DNA of technical innovation and ensuring our Global Security operations are fast and agile. Finally, we Drive Empowered & Risk-Informed Decision Making by providing our leaders with the necessary information to make agile decisions based on risk. In order to enhance collaboration and cross-functional partnerships, our organization follows a hybrid work schedule that requires employees to work in the office for 2 to 3 days a week, as directed by their manager. We regularly review our hybrid work model, and the specific requirements may change at any time.

As a direct report to the Data Loss Prevention Lead (DLP) within Data Protection, you will be a part of the team responsible for Data Defense and Access Assurance (DDAA). As a DLP Analyst, you will be responsible for supporting the DLP Lead along with a team of cross-functional cyber, privacy, engineering, and data protection analysts to define, implement, manage, and measure controls to protect data in accordance with relevant geographical regulations, contractual commitments, and confidentiality requirements.

Responsibilites
- Monitor for and respond to events generated from TikTok's data protection technology suite that involve loss of consumer data, employee data, business sensitive data, and/or intellectual property
- Accurately identify and escalate DLP events based on sensitivity of data types
- Understand and follow established data protection incident response playbooks
- Identify opportunities to improve existing monitoring and response processes
- Support the development and testing of newly created DLP policies and detection logic
- Collect and analyze DLP event metrics to identify trends and define/maintain KPIs and metric reporting

Qualifications

- Bachelors' Degree or industry equivalent work experience
- 1-3 years experience working in cybersecurity or information security
- Demonstrate ability to quickly assimilate new knowledge and remain current on new developments in cybersecurity capabilities and industry knowledge
- Understanding of:
- Data protection throughout the data lifecycle
- Data loss/content monitoring
- Data discovery and identification
- Logging, monitoring, and security event management
- Experience with process automation and using one or more programming/scripting languages (e.g., Python, Go, Javascript)
- Familiarity with regulatory privacy landscape (e.g., GDPR, CCPA)

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.