Governance Risk & Compliance, Senior Third Party Security Analyst - Global Security Organization
Washington D.C., District of Columbia, United States
The mission of TikTok's Global Security Organization is to build and earn trust by reducing risk and securing our businesses and products. Also known as "GSO", this team is the foundation of our efforts to keep TikTok safe, secure, and operating at scale for over 1 billion people around the world. We work to ensure that the TikTok platform is safe and secure, that our users' experience and their data remains safe from external or internal threats, and that we comply with global regulations wherever TikTok operates.
Trust is one of TikTok's biggest initiatives, and security is integral to our success. In whatever ways users interact with us — whether they're watching videos on their For You page, interacting with a Live video, or buying products on TikTok Shop — GSO protects their data and privacy, so they can have a secure and trustworthy experience.
The Security Governance, Risk, and Compliance team is responsible for working closely with cross-functional partners to manage security risks to ensure we meet all industry cybersecurity compliance standards and government regulations through developing governing policies, implementing the security control framework, conducting security risk and control assessments, and staying up-to-date on global compliance initiatives.
The Governance, Risk, & Compliance (GRC) Third Party Security Senior Analyst role involves performing comprehensive cybersecurity risk assessments to reduce security risks related to ByteDance's use of third parties. You will have the opportunity to both conduct third party security assessments and monitor and reduce third party security risk for the company. You will work closely with cross-functional partners to evaluate third party risks and develop innovative mitigation and remediation strategies, provide ongoing compliance risk mitigation support, and lead various third party risk management projects. You would be a great fit for this role if you are enthusiastic about:
1. Maturing an industry-leading third party security management program alongside a team of outstanding individuals
2. Thriving in fast-paced environments and pivoting priorities while demonstrating the ability to quickly adapt in the face of constantly evolving cybersecurity challenges
3. Learning quickly and often with a strong appetite for acquiring new knowledge and staying up-to-date on current emerging trends
4. Fostering collaboration and cross-functional partnerships to help spread awareness and drive the implementation of a strong security risk management program in order to mitigate third party risks
Responsibilities
As a Governance, Risk, & Compliance (GRC) Third Party Security Senior Analyst, you will be responsible for:
- Conducting security assessments of ByteDance's third parties, which involves evaluating potential security risks before engaging with third-party vendors
- Support third-party monitoring and offboarding operations by implementing processes for ongoing security monitoring
- Assess, monitor, and manage the security risks associated with external vendors, suppliers, or service providers and report findings to various stakeholders
- Mature the process for handling security incidents related to third parties and assist with investigating and responding to security incidents
- Collaborate with Procurement, Legal, Compliance, IT, and Business Units to ensure a consistent and effective security risk management approach, including enhancing third-party contract management with risk-related clauses and SLAs
- Drive automation and efficiency in risk assessments, monitoring, and reporting by leveraging technology solutions
Trust is one of TikTok's biggest initiatives, and security is integral to our success. In whatever ways users interact with us — whether they're watching videos on their For You page, interacting with a Live video, or buying products on TikTok Shop — GSO protects their data and privacy, so they can have a secure and trustworthy experience.
The Security Governance, Risk, and Compliance team is responsible for working closely with cross-functional partners to manage security risks to ensure we meet all industry cybersecurity compliance standards and government regulations through developing governing policies, implementing the security control framework, conducting security risk and control assessments, and staying up-to-date on global compliance initiatives.
The Governance, Risk, & Compliance (GRC) Third Party Security Senior Analyst role involves performing comprehensive cybersecurity risk assessments to reduce security risks related to ByteDance's use of third parties. You will have the opportunity to both conduct third party security assessments and monitor and reduce third party security risk for the company. You will work closely with cross-functional partners to evaluate third party risks and develop innovative mitigation and remediation strategies, provide ongoing compliance risk mitigation support, and lead various third party risk management projects. You would be a great fit for this role if you are enthusiastic about:
1. Maturing an industry-leading third party security management program alongside a team of outstanding individuals
2. Thriving in fast-paced environments and pivoting priorities while demonstrating the ability to quickly adapt in the face of constantly evolving cybersecurity challenges
3. Learning quickly and often with a strong appetite for acquiring new knowledge and staying up-to-date on current emerging trends
4. Fostering collaboration and cross-functional partnerships to help spread awareness and drive the implementation of a strong security risk management program in order to mitigate third party risks
Responsibilities
As a Governance, Risk, & Compliance (GRC) Third Party Security Senior Analyst, you will be responsible for:
- Conducting security assessments of ByteDance's third parties, which involves evaluating potential security risks before engaging with third-party vendors
- Support third-party monitoring and offboarding operations by implementing processes for ongoing security monitoring
- Assess, monitor, and manage the security risks associated with external vendors, suppliers, or service providers and report findings to various stakeholders
- Mature the process for handling security incidents related to third parties and assist with investigating and responding to security incidents
- Collaborate with Procurement, Legal, Compliance, IT, and Business Units to ensure a consistent and effective security risk management approach, including enhancing third-party contract management with risk-related clauses and SLAs
- Drive automation and efficiency in risk assessments, monitoring, and reporting by leveraging technology solutions
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Job stats:
2
1
0
Categories:
Analyst Jobs
Compliance Jobs
Tags: Automation Compliance Governance Monitoring Privacy Risk assessment Risk management Security assessment SLAs
Region:
North America
Country:
United States
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.
Information Security Officer jobsInformation System Security Officer jobsSenior Security Analyst jobsSenior Cybersecurity Engineer jobsSenior Cloud Security Engineer jobsSystems Engineer jobsSystems Administrator jobsInformation Security Manager jobsSenior Information Security Analyst jobsSenior Network Security Engineer jobsIT Security Engineer jobsCyber Security Specialist jobsChief Information Security Officer jobsIT Security Analyst jobsSecurity Consultant jobsSecurity Specialist jobsInformation System Security Officer (ISSO) jobsSenior Cyber Security Engineer jobsInformation Systems Security Engineer jobsCyber Threat Intelligence Analyst jobsSenior Information Security Engineer jobsThreat Intelligence Analyst jobsCyber Security Architect jobsSecurity Operations Analyst jobsSenior Product Security Engineer jobs
GDPR jobsSaaS jobsEncryption jobsBash jobsSplunk jobsTop Secret jobsSQL jobsEDR jobsFinance jobsMalware jobsThreat detection jobsRMF jobsIDS jobsSDLC jobsForensics jobsIPS jobsITIL jobsTerraform jobsDocker jobsIntrusion detection jobsCompTIA jobsActive Directory jobsDoDD 8570 jobsSOC 2 jobsOWASP jobs
SAP jobsCRISC jobsGIAC jobsUNIX jobsSANS jobsHIPAA jobsAnsible jobsCCSP jobsOSCP jobsJira jobsBanking jobsSOX jobsVPN jobsTCP/IP jobsSOAR jobsIT infrastructure jobsMITRE ATT&CK jobsMachine Learning jobsJavaScript jobsClearance Required jobsVMware jobsData Analytics jobsIndustrial jobsCISO jobsNIST 800-53 jobs