Privacy Program Manager - Commitments- PDPO, San Jose

$147,000 - $269,800/Yr

Tiktok - San Jose, CA

Full-time - Mid Level

San Jose, CA

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

About the position

As a Privacy Program Manager at TikTok, you will play a pivotal role in leading and supervising the company's privacy initiatives through the Privacy and Data Protection Office (PDPO). This global team is dedicated to driving privacy best practices and ensuring compliance with various global laws and regulations, including GDPR and CCPA. Your responsibilities will encompass the development, implementation, and maintenance of a comprehensive privacy risk management framework that aligns with these regulations. You will be tasked with executing regular privacy risk assessments and audits to identify potential risks and formulate effective mitigation strategies. Collaboration is key in this role, as you will work closely with cross-functional teams, including IT, legal, and human resources, to ensure that privacy considerations are seamlessly integrated into business processes, product development, and technology solutions. You will also be responsible for developing and maintaining privacy policies, procedures, and documentation that support compliance efforts and best practices. To foster a culture of privacy within the organization, you will facilitate training and awareness programs for employees. In addition to monitoring changes in privacy laws and regulations, you will assess their impact on TikTok's privacy program and update policies and practices as necessary. As the point of contact for privacy-related inquiries from employees, customers, and regulators, you will provide guidance and support to business units in conducting data protection impact assessments (DPIAs) for both new and existing processes. Your role will also involve developing standardized processes, technical solutions, and knowledge-sharing tools to enhance the organization's privacy capabilities. You will need to excel in situations of ambiguity, leveraging your judgment and analytical skills to navigate complex regulatory landscapes and guide the organization through privacy challenges.

Responsibilities

• Develop, implement, and maintain privacy risk management framework to ensure compliance with global privacy regulations such as GDPR, CCPA, etc.
• Execute regular privacy risk assessments and audits to identify potential privacy risks and develop mitigation strategies.
• Collaborate with cross-functional teams, including IT, legal, and human resources, to ensure that privacy considerations are integrated into business processes, product development, and technology solutions.
• Develop and maintain privacy policies, procedures, and documentation to support compliance efforts and best practices.
• Facilitate privacy training and awareness programs for employees to promote a culture of privacy and data protection within the organization.
• Monitor changes in privacy laws and regulations and assess their impact on the organization's privacy program, updating policies and practices as necessary.
• Serve as the point of contact for privacy-related inquiries from employees, customers, and regulators.
• Provide guidance and support to business units in conducting data protection impact assessments (DPIAs) for new and existing processes.
• Develop standardized processes, technical solutions, and knowledge sharing tools.
• Excel in situations of ambiguity, leveraging a high degree of judgment and analysis to navigate uncertain regulatory landscapes and guide the organization through complex privacy challenges.

Requirements

• Minimum bachelor's degree
• Minimum 5+ years work experience, with 2+ years of experience in privacy risk, data protection, or a related field, with a proven track record of executing privacy programs
• Strong analytical, organizational, and interpersonal skills, combined with excellent verbal and written communication skills
• Attention to detail, organized, resourceful, with interest and proven ability to work in a fast-paced, multi-cultural and multi-functional environment
• Strong understanding of global data protection laws and regulations, including GDPR, CCPA, and industry-specific regulations.

Nice-to-haves

• Experience conducting privacy impact assessments and managing privacy compliance audits.
• Excellent communication skills, both written and verbal, with the ability to convey complex privacy concepts to diverse audiences.
• Strong analytical and problem-solving skills, with a detail-oriented approach to managing projects and tasks.
• Demonstrated ability to work effectively in environments of ambiguity and constant change.
• Ability to work collaboratively in a team environment and to engage with stakeholders at all levels of the organization.

Benefits

• 100% premium coverage for employee medical insurance, approximately 75% premium coverage for dependents
• Health Savings Account (HSA) with a company match
• Dental, Vision, Short/Long term Disability, Basic Life, Voluntary Life and AD&D insurance plans
• Flexible Spending Account (FSA) Options like Health Care, Limited Purpose and Dependent Care
• 10 paid holidays per year plus 17 days of Paid Personal Time Off (PPTO)
• 10 paid sick days per year
• 12 weeks of paid Parental leave
• 8 weeks of paid Supplemental Disability
• Mental and emotional health benefits through EAP and Lyra
• 401K company match
• Gym and cellphone service reimbursements