Privacy Analyst, Third Party Risk Measurement - PDPO

$118,800 - $196,000/Yr

Tiktok - New York, NY

Full-time - Mid Level

New York, NY

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

About the position

TikTok is the leading destination for short-form mobile video, and our mission is to inspire creativity and bring joy. The Privacy and Data Protection Office (PDPO) is at the forefront of TikTok's commitment to privacy, leading, supervising, and empowering all privacy-related work in an accountable and industry-leading manner. As a Privacy Analyst within the PDPO, you will join a global team dedicated to driving privacy best practices across TikTok. This role is crucial in ensuring compliance with global laws and regulations while promoting the adoption of privacy best practices throughout the organization. In this position, you will be responsible for supporting the program that identifies, manages, and mitigates risks associated with Bytedance's third parties. This includes enhancing our monitoring program, developing tools and processes for ongoing assessment of third parties, and utilizing industry-leading tools to dynamically measure third-party risks. You will also conduct data validation and cleanliness activities to ensure accurate reporting and integration with other teams and tools. Collaboration with cross-functional teams will be essential as you work to further privacy-leading practices, especially in the offboarding of third parties. Additionally, you will assist in developing innovative solutions to evaluate complex business, technology, and risk issues in a fast-paced environment. The ideal candidate will possess a strong foundation in governance, risk, and compliance (GRC) or related privacy, compliance, and security experience. You will need to have a solid understanding of data privacy regulations such as GDPR and CCPA, as well as knowledge of controls frameworks and industry standards like ISO and NIST. This role requires a highly motivated individual with excellent communication and relationship-building skills, who is adaptable to changing priorities and accustomed to working in a dynamic environment. Your contributions will help TikTok maintain its commitment to privacy and data protection while fostering a culture of creativity and joy.

Responsibilities

• Support the program to identify, manage, and mitigate risks associated with Bytedance's third parties.
• Support improvements to our monitoring program, managing the development of tooling and processes to assess third parties on an ongoing basis.
• Work with industry-leading tools to dynamically measure third-party risks and report to various stakeholders.
• Conduct data validation and cleanliness activities to ensure accurate reporting and integration with other teams and tools.
• Partner with cross-functional teams to further privacy-leading practices in the offboarding of third parties.
• Assist in developing innovative solutions to help evaluate complex business, technology, and risk issues in a fast-paced environment.

Requirements

• Bachelor's degree in computer science, data science, management information systems, or a related discipline from an accredited college or university, or measurable knowledge/experience from proven industry, military, defense, or government operations.
• 2+ years of governance risk and compliance (GRC) or related privacy, compliance, and security experience.
• Experience identifying, classifying, assessing, and mitigating privacy and security risks.
• Knowledge of controls frameworks and industry standard frameworks (ISO, NIST, etc.).
• Knowledge of data privacy regulations (GDPR, CCPA, etc.).

Nice-to-haves

• A highly motivated individual with strong communication and relationship-building skills, demonstrating a record of ongoing accomplishment and commitment to excellence.
• Accustomed to working in a fast-paced, startup-like environment and adaptable to changing or emerging priorities.
• Experience working hands-on with cross-functional teams including legal, procurement, information security, business continuity, privacy, and IT engineering.

Benefits

• 100% premium coverage for employee medical insurance, approximately 75% premium coverage for dependents, and a Health Savings Account (HSA) with a company match.
• Dental, Vision, Short/Long term Disability, Basic Life, Voluntary Life, and AD&D insurance plans.
• Flexible Spending Account (FSA) options like Health Care, Limited Purpose, and Dependent Care.
• 10 paid holidays per year plus 17 days of Paid Personal Time Off (PPTO) (prorated upon hire and increased by tenure) and 10 paid sick days per year.
• 12 weeks of paid Parental leave and 8 weeks of paid Supplemental Disability.
• Mental and emotional health benefits through our EAP and Lyra.
• 401K company match, gym, and cellphone service reimbursements.