72 jobs for "IT Compliance and Risk Specialist"

Security Solutions Delivery Specialist - Global Security Organization

At TikTok - New York

Posted on Sep 17

View job Apply on company site

External Security Relations & Assurance Specialist - Global Security Organization

At TikTok - New York

Posted on Sep 17

View job Apply on company site

Senior Fraud Risk Management Expert

At Adyen - Amsterdam

Posted on Sep 23

View job Apply on company site

Quality Systems Engineer- CSV Specialist

At Jabil - Devens

Posted on Oct 7

View job Apply on company site

Trade Compliance Specialist

At Waters - Milford · New Castle

Posted on Sep 23

View job Apply on company site

Senior Endpoint Detection and Response (EDR) Specialist

At Kyndryl - Noida India

Posted on Sep 1

View job Apply on company site

Security Specialist

At Kyndryl - Bangalore

Posted on Jul 15

View job Apply on company site

Principal Specialist, Financial Crime Compliance (Bangkok-based, Relocation Provided)

At Agoda - Bangkok

Posted on Sep 14

View job Apply on company site

HR Consultant, International

At Justworks - Mexico City

Posted on Aug 27

View job Apply on company site

HR Consultant, International

At Justworks - Toronto

Posted on Aug 27

View job Apply on company site

Payroll Tax Specialist

At Justworks - New York · Tampa

Posted on Jul 7

View job Apply on company site

Tendering Specialist - Substation Automation & Protection

At Hitachi Energy - Chennai

Posted on Nov 6

View job Apply on company site

TikTok

Security Solutions Delivery Specialist - Global Security Organization

New York$111,600 – $162,000Posted Sep 17, 2026

Apply on company site View full job

Responsibilities

The mission of TikTok's Global Security Organization is to build and earn trust by reducing risk and securing our businesses and products. Also known as "GSO", this team is the foundation of our efforts to keep TikTok safe, secure, and operating at scale for over 1 billion people around the world. We work to ensure that the TikTok platform is safe and secure, that our users' experience and their data remains safe from external or internal threats, and that we comply with global regulations wherever TikTok operates.

Trust is one of TikTok's biggest initiatives, and security is integral to our success. In whatever ways users interact with us - whether they're watching videos on their For You page, interacting with a Live video, or buying products on TikTok Shop - GSO protects their data and privacy, so they can have a secure and trustworthy experience.

The GSO provides industry-leading security and privacy services to company, guided by four principles: trust and transparency, business enablement, risk-informed decision-making, and proactive risk reduction. We strive to build sustainable, world-class security capabilities.

The Security Solutions & Delivery (SSD) team turns security requirements into practical, auditable outcomes that help the business move faster and reduce risk. We support business revenue through Customer Assurance, sustain critical third-party integrations through Partner Compliance, translate evolving regulatory requirements into action through Regulatory Intelligence, and directly take ownership of fixing systemic identified risks through Security Remediation. In addition, Our Organizational Excellence pillar supports the broader Global Security Organization with the finance, coordination, and the operational foundations it needs to run effectively. The impact of this work is clear and immediate: faster deals, stronger partner continuity, addressing high priorities, and greater trust with customers and partners.

We are seeking a Security Solutions Delivery professional to own the design, delivery, and continuous improvement of security solutions that protect TikTok's global operations. This is a net-new role that will work in parallel with our existing Security Solutions & Communications function, focusing on the hands-on delivery of security architectures, control implementations, and operational solutions that address emerging threats and regulatory requirements.
While the existing Security Solutions Delivery Associate focuses on operational delivery and stakeholder communication, this new role will take on a broader scope: leading complex security solution projects from concept through implementation, driving architectural decisions, and ensuring that security solutions are not only effective but scalable, well-documented, and aligned with our regulatory commitments. You will be a senior individual contributor who can independently own end-to-end solution delivery while collaborating across the security organization.

Key Responsibilities
- Design end-to-end security solutions, from data protection architectures to access control frameworks, that balance risk reduction, operational efficiency, and user experience
- Conduct threat modeling and risk assessments to inform solution design priorities, control selection, and technology recommendations aligned with requirements
- Lead full-lifecycle delivery of security solutions: requirements gathering, design, implementation, validation, and operational handoff , managing cross-functional dependencies and competing priorities
- Establish operational metrics for delivered solutions and conduct regular reviews to identify optimization, gap closures, and technology refreshes
- Implement feedback loops with operational teams to continuously improve solution effectiveness and reduce friction
- Partner with Product Security to embed solutions into the product development lifecycle and engage Engineering and Infrastructure teams to validate solution feasibility and drive implementation
- Translate complex security concepts into business-relevant narratives for leadership decision-making; deliver clear status reporting on milestones, risks, and mitigation plans
- Own security solutions communication materials , solution briefs, implementation guides, training documentation, with clear adoption plans
- Manage internal communications, all-hands, executive reporting, capability showcases , that display the team's solutions, impact, and strategic value to the broader organization
- Maintain a living register of active projects and associated risks, ensuring visibility into evolving exposures and mitigation status across the solutions portfolio

Qualifications

Minimum Qualifications:
- Proven track record of leading end-to-end delivery of complex security solutions - from concept through implementation
- Strong understanding of enterprise security architecture, including data protection, identity and access management, network security, and cloud security
- Experience managing cross-functional security projects with multiple stakeholders and dependencies
- Ability to develop clear, actionable security communications for both technical and executive audiences
- Knowledge of regulatory and compliance frameworks relevant to global technology companies (GDPR, SOC 2, ISO 27001, USDS requirements)
- Experience developing solution documentation, including architecture diagrams, control descriptions, and operational runbooks

Preferred Qualifications
- Bachelor's degree in Information Security, Computer Science, Engineering, or related field, or equivalent practical experience
- 5+ years of experience in security solution design, delivery, or security architecture roles
- Experience in a high-growth technology company with a global regulatory footprint
- Familiarity with security landscape, including USDS compliance obligations
- Industry certifications such as CISSP, CCSP, or SABSA
- Experience with security metrics, dashboards, and reporting frameworks
- Background in threat modeling and risk assessment methodologies

Job Information

[For Pay Transparency] Compensation Description (annually)

The base salary range for this position in the selected city is $111600 - $162000 annually.

Compensation may vary outside of this range depending on a number of factors, including a candidate's qualifications, skills, competencies and experience, and location. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work, and this role may be eligible for additional discretionary bonuses/incentives, and restricted stock units.

Benefits may vary depending on the nature of employment and the country work location. Employees have day one access to medical, dental, and vision insurance, a 401(k) savings plan with company match, paid parental leave, short-term and long-term disability coverage, life insurance, wellbeing benefits, among others. Employees also receive 10 paid holidays per year, 10 paid sick days per year and 17 days of Paid Personal Time (prorated upon hire with increasing accruals by tenure).

The Company reserves the right to modify or change these benefits programs at any time, with or without notice.

For Los Angeles County (unincorporated) Candidates:

Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state, and local laws including the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Our company believes that criminal history may have a direct, adverse and negative relationship on the following job duties, potentially resulting in the withdrawal of the conditional offer of employment:

1. Interacting and occasionally having unsupervised contact with internal/external clients and/or colleagues;

2. Appropriately handling and managing confidential information including proprietary and trade secret information and access to information technology systems; and

3. Exercising sound judgment.

Responsibilities

Qualifications

Qualifications

Minimum Qualifications:
- Proven track record of leading end-to-end delivery of complex security solutions - from concept through implementation
- Strong understanding of enterprise security architecture, including data protection, identity and access management, network security, and cloud security
- Experience managing cross-functional security projects with multiple stakeholders and dependencies
- Ability to develop clear, actionable security communications for both technical and executive audiences
- Knowledge of regulatory and compliance frameworks relevant to global technology companies (GDPR, SOC 2, ISO 27001, USDS requirements)
- Experience developing solution documentation, including architecture diagrams, control descriptions, and operational runbooks

Preferred Qualifications
- Bachelor's degree in Information Security, Computer Science, Engineering, or related field, or equivalent practical experience
- 5+ years of experience in security solution design, delivery, or security architecture roles
- Experience in a high-growth technology company with a global regulatory footprint
- Familiarity with security landscape, including USDS compliance obligations
- Industry certifications such as CISSP, CCSP, or SABSA
- Experience with security metrics, dashboards, and reporting frameworks
- Background in threat modeling and risk assessment methodologies

About TikTok

TikTok is the leading destination for short-form mobile video and our mission is to inspire creativity and bring joy.

Size: 5,001 - 10,000 employees
Industry: Entertainment & Gaming

View company profile