Privacy Program Manager-Risk Management-PDPO-New York

$147,200 - $269,800/Yr

Tiktok - New York, NY

Full-time - Mid Level

New York, NY

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

About the position

TikTok is the leading destination for short-form mobile video, and our mission is to inspire creativity and bring joy. The Privacy and Data Protection Office (PDPO) is responsible for leading, supervising, and empowering all of TikTok's privacy work in an accountable and industry-leading manner. As a Privacy Program Manager within the Risk Management team, you will join a global team dedicated to driving privacy best practices across TikTok. This role involves ensuring compliance with global laws and regulations, as well as the adoption of privacy best practices across the organization. You will collaborate with colleagues worldwide to drive multiple programs and partner with legal and technical teams to implement changes that enhance privacy practices. In this role, you will develop, implement, and maintain a privacy risk management framework to ensure compliance with global privacy regulations such as GDPR and CCPA. You will execute regular privacy risk assessments and audits to identify potential privacy risks and develop mitigation strategies. Collaboration with cross-functional teams, including IT, legal, and human resources, is essential to ensure that privacy considerations are integrated into business processes, product development, and technology solutions. You will also be responsible for developing and maintaining privacy policies, procedures, and documentation to support compliance efforts and best practices. Facilitating privacy training and awareness programs for employees will be a key part of your responsibilities, promoting a culture of privacy and data protection within the organization. You will monitor changes in privacy laws and regulations, assessing their impact on the organization's privacy program and updating policies and practices as necessary. As the point of contact for privacy-related inquiries from employees, customers, and regulators, you will provide guidance and support to business units in conducting data protection impact assessments (DPIAs) for new and existing processes. Your role will also involve developing standardized processes, technical solutions, and knowledge-sharing tools to enhance the organization's privacy capabilities. You will excel in situations of ambiguity, leveraging a high degree of judgment and analysis to navigate uncertain regulatory landscapes and guide the organization through complex privacy challenges.

Responsibilities

• Develop, implement, and maintain privacy risk management framework to ensure compliance with global privacy regulations such as GDPR, CCPA, etc.
• Execute regular privacy risk assessments and audits to identify potential privacy risks and develop mitigation strategies.
• Collaborate with cross-functional teams, including IT, legal, and human resources, to ensure that privacy considerations are integrated into business processes, product development, and technology solutions.
• Develop and maintain privacy policies, procedures, and documentation to support compliance efforts and best practices.
• Facilitate privacy training and awareness programs for employees to promote a culture of privacy and data protection within the organization.
• Monitor changes in privacy laws and regulations and assess their impact on the organization's privacy program, updating policies and practices as necessary.
• Serve as the point of contact for privacy-related inquiries from employees, customers, and regulators.
• Provide guidance and support to business units in conducting data protection impact assessments (DPIAs) for new and existing processes.
• Develop standardized processes, technical solutions, and knowledge sharing tools.
• Excel in situations of ambiguity, leveraging a high degree of judgment and analysis to navigate uncertain regulatory landscapes and guide the organization through complex privacy challenges.

Requirements

• Minimum bachelor's degree
• Minimum 5+ years work experience, with 2+ years of experience in privacy risk, data protection, or a related field, with a proven track record of executing privacy programs
• Strong analytical, organizational, and interpersonal skills, combined with excellent verbal and written communication skills
• Attention to detail, organized, resourceful, with interest and proven ability to work in a fast-paced, multi-cultural and multi-functional environment
• Strong understanding of global data protection laws and regulations, including GDPR, CCPA, and industry-specific regulations.

Nice-to-haves

• Experience conducting privacy impact assessments and managing privacy compliance audits.
• Excellent communication skills, both written and verbal, with the ability to convey complex privacy concepts to diverse audiences.
• Strong analytical and problem-solving skills, with a detail-oriented approach to managing projects and tasks.
• Demonstrated ability to work effectively in environments of ambiguity and constant change.
• Ability to work collaboratively in a team environment and to engage with stakeholders at all levels of the organization.

Benefits

• 100% premium coverage for employee medical insurance
• Approximately 75% premium coverage for dependents
• Health Savings Account (HSA) with a company match
• Dental, Vision, Short/Long term Disability, Basic Life, Voluntary Life and AD&D insurance plans
• Flexible Spending Account (FSA) Options like Health Care, Limited Purpose and Dependent Care
• 10 paid holidays per year
• 17 days of Paid Personal Time Off (PPTO)
• 10 paid sick days per year
• 12 weeks of paid Parental leave
• 8 weeks of paid Supplemental Disability
• Mental and emotional health benefits through EAP and Lyra
• 401K company match
• Gym and cellphone service reimbursements