Senior Cyber Regulatory Advisor

Join us.

The Global Security Organization provides industry-leading cyber-security and business protection services to TikTok globally. Our organization employs four principles that guide our strategic and tactical operations. Firstly, we Champion Transparency & Trust by leading the charge in organizational transparency, prioritizing customer trust, and placing user needs first. Secondly, we aim to maintain Best in Class Global Security by proactively identifying and reducing risks while enabling innovative product development. We constantly work towards a sustainable world-class security capability. Thirdly, we strive to be a Business Catalyst & Enabler by embodying the DNA of technical innovation and ensuring our Global Security operations are fast and agile. Finally, we Drive Empowered & Risk-Informed Decision Making by providing our leaders with the necessary information to make agile decisions based on risk. In order to enhance collaboration and cross-functional partnerships, our organization follows a hybrid work schedule that requires employees to work in the office for 2 to 3 days a week, as directed by their manager. We regularly review our hybrid work model, and the specific requirements may change at any time.

If you are passionate about shaping a secure and compliant environment while promoting a culture of security, we invite you to apply for this critical, executive leadership role within TikTok's Global Security Organization. Your expertise and leadership will help us maintain the highest standards of security and governance. As the Senior Cyber Regulatory Lead, you will play a crucial role in designing, establishing and maintaining a robust security environment, including meeting with internal and external stakeholders across academia, government, regulators and think-tanks, speaking at conferences, webinars and other public events, and informing executives to help them make security-related decisions.

Roles and Responsibilities :
Demonstrated Ability to Implement and Uphold Security Practices:
- Work with various risk and controls teams to conduct regular maturity and control assessments to evaluate and report on the current state of security programs, determine their desired objectives, and formulate strategies to achieve them. Ensure that results of these activities are communicated and reported effectively and efficiently to executive leadership to help ensure mitigation.
- Remain informed about forthcoming security obligations, compliance requirements, and relevant laws and regulations, and facilitate their integration within the strategic planning processes.
- Work cross-functionally and with various partners to develop clear, centralized, and easily accessible documentation to evidence critical security programs, decisions, organizations, and functions.

External Communications and Reporting:
- Serve and meet as the primary cyber advisor between TikTok's Global Security Organization and external regulators, government bodies and think-tanks on TikTok's global cyber security effort progress and programs.

Visibility and Reporting:
- Work with various security partners to understand and develop visibility and reporting into the scope and limitations of current security programs. This will include transparent reporting of inclusions and exclusions. Work to obtain buy-in from senior leadership and build strategies to enhance visibility.

Organizational Culture and Advocacy:
- Work with various areas of security and with executive leadership to help cultivate an organizational culture that prioritizes vigilance, open communication, and adherence to the company's security standards and policies.

Qualifications

Minimum Qualifications:
-Proven experience in meeting with regulators, government bodies and industry think-tanks in communicating cyber security program efforts
- Partnering with internal counsel and government affairs teams to socialize the progress of a company's cyber security program
- Board of Director and/or Board Audit Committee reporting, regulatory reporting, metrics and OKR management, security governance, compliance, and risk management
- Strong understanding of security, engineering and data protection concepts, industry standards and regulations.
- Excellent communication and leadership skills including proven experience collaborating with an internationally-based team
- Flexibility to proactively address tasks and projects as they arise.
- Ability to work independently and travel internationally as needed.

Preferred Qualifications:
- 15+ years in the design, build and operation of global cybersecurity programs and cyber risk management
- Higher degree in a related field (e.g., Information Security, Risk Management, etc.).
- Previous experience as a Chief Information Security Officer or Chief Privacy Officer for global companies
- Certified Information Systems Security Professional (CISSP) or equivalent certification is a plus.

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

TikTok is committed to providing reasonable accommodations in our recruitment processes for candidates with disabilities, pregnancy, sincerely held religious beliefs or other reasons protected by applicable laws. If you need assistance or a reasonable accommodation, please reach out to us at https://shorturl.at/cdpT2