Insider Risk Investigator - Global Security Organisation

Responsibilities

TikTok is the leading destination for short-form mobile video. At TikTok, our mission is to inspire creativity and bring joy. TikTok's global headquarters are in Los Angeles and Singapore, and its offices include New York, London, Dublin, Paris, Berlin, Dubai, Jakarta, Seoul, and Tokyo.

Why Join Us
Creation is the core of TikTok's purpose. Our platform is built to help imaginations thrive. This is doubly true of the teams that make TikTok possible.
Together, we inspire creativity and bring joy - a mission we all believe in and aim towards achieving every day.
To us, every challenge, no matter how difficult, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.
At TikTok, we create together and grow together. That's how we drive impact - for ourselves, our company, and the communities we serve.
Join us.

Team Introduction
The mission of TikTok's Global Security Organization is to build and earn trust by reducing risk and securing our businesses and products. Also known as "GSO", this team is the foundation of our efforts to keep TikTok safe, secure, and operating at scale for over 1 billion people around the world. We work to ensure that the TikTok platform is safe and secure, that our users' experience and their data remains safe from external or internal threats, and that we comply with global regulations wherever TikTok operates.

Trust is one of TikTok's biggest initiatives, and security is integral to our success. In whatever ways users interact with us - whether they're watching videos on their For You page, interacting with a Live video, or buying products on TikTok Shop - GSO protects their data and privacy, so they can have a secure and trustworthy experience.

As an Insider Risk Investigator, you will conduct investigations and data analysis of attempts of internal data exfiltration, internal fraud and abuse and author investigation reports, trend reports, conduct open source intelligence (OSINT), drive metric and precision improvement of insider risk detection engines. The candidate will collaborate with cross-functional teams and stakeholders.

Responsibilities
- Conduct investigations and analysis of large complex datasets involving insider risks, track metrics and identify gaps and vulnerabilities, and produce seamless reports of investigation.
- Conduct open source intelligence (OSINT) on emerging insider risks to help fuel proactive detection of risks.
- Author reports on regional trends and patterns and communicate findings, risks, and gaps to both technical and non-technical program stakeholders.
- Proactively monitor, triage, investigate alerts and collaborate with the team on pattern identification.
- Manage insider risk incidents per region and as needed for the global team and escalate incidents.
- Coordinate with team members to identify and implement opportunities for continuous program improvement.

Qualifications

Minimum Qualifications:
-Degree in crimincal justice, data analytics or equivalent insider risk, internal fraud, information security, privacy, risk, or like discipline from an accredited college or university or measurable knowledge/experience from proven corporate industry, military, defense, or government operations.
- 5+ years of experience working with insider risk, internal fraud or counterintelligence.
- Experience identifying risks and analyzing data on red flags of data exfiltration and insider risks, authoring reports for litigation, standards of evidence, chain of custody, stakeholder management, and developing and executing work processes in a fast-paced technical environment.
- Ability to prioritize risks to the business in real-time.
- Excellent investigative, analytical and problem-solving skills with attention to detail. ITPM or CFE credentials preferred.
- Experience with Insider Risk schemes, UAM, SIEM, DLP and UEBA technologies.

Preferred Qualifications:
- Experience with Insider Risk schemes, data exfiltration, monitoring, and detection.
- Experience conducting Insider Risk investigations, authoring reports of investigation, and seeing cases through litigation.
-Experience conducting subject and witness interviews in a corporate setting to verify information and corroborate evidence.
- Excellent communication skills (verbal and written) along with teamwork and collaboration across global and multi-functional teams and intelligence source groups.
- Expert knowledge of insider risk, cyber crime, and/or data loss prevention and detection.