Technical Program Manager, Privacy and Data Protection - USDS

Tiktok - Washington, DC

Full-time

Washington, DC

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

About the position

The Technical Program Manager for Privacy and Data Protection at TikTok U.S. Data Security (USDS) plays a crucial role in overseeing and governing privacy impacts related to TikTok's operations. This position is responsible for ensuring adherence to privacy regulations, enhancing data protection capabilities, and collaborating with cross-functional teams to implement effective privacy solutions. The role requires a strong understanding of security, privacy, and technical solutions, and aims to build trust on the TikTok platform while ensuring compliance with internal policies and external regulations.

Responsibilities

• Provide leadership support in engaging global partners to develop privacy solutions and data protection capabilities to meet specific USDS needs.
• Provide program oversight and governance over capability implementation and operationalization, such as developing or facilitating engagement models, policies, processes, SOPs, RACIs, trainings, and awareness.
• Identify areas for improving privacy compliance and data protection capabilities, partnering with the Privacy and Data Protection Office (PDPO) to champion consistent implementation across all products.
• Participate in regular privacy assessments and audits following the global privacy compliance framework to ensure compliance with internal policies and external regulations.
• Facilitate stakeholder engagements and foster partnerships with cross-functional teams, driving constructive communications with internal and external stakeholders.
• Identify areas for automation to increase efficiency of repeated tasks, such as regular status reporting, and track staffing, contracting, and procurement.
• Develop impactful metrics to measure the coverage and effect of privacy and data solutions, and perform special projects as needed.

Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field, or significant relevant experience in security, privacy, and data protection fields.
• 5+ years of experience in leading or managing technical projects, with the ability to collaborate effectively with and influence cross-functional stakeholders.
• Strong understanding of privacy frameworks (e.g., GDPR, CCPA), privacy by design principles, and data protection capabilities.
• In-depth knowledge of security-in-depth principles as the foundation of privacy controls, with the ability to explore security mechanisms in building and integrating privacy controls.
• Strategic thinking and problem-solving abilities, along with excellent communication and interpersonal skills.

Nice-to-haves

• Experience in the social media industry.
• Experience in a global R&D setting.
• Certifications such as CDPSE, CISSP, CIPT, CIPP, CIPM.
• Knowledge of data governance.

Benefits

• Flexible work schedule with a hybrid model requiring in-office work 3 days a week.
• Commitment to diversity and inclusion in the workplace.
• Reasonable accommodations for candidates with disabilities or other protected reasons.