Chief Insider Risk & Investigations Leader

TikTok USDS Joint Venture; Washington (District of Columbia); On-site; USD 206,000 - 397,000; Full time

Job summary

TikTok USDS Joint Venture LLC is seeking an Insider Risk Program Lead to own the strategy, maturity, and daily operations of the insider risk program. You will define vision, build a team of investigators, establish policy frameworks, and serve as the senior insider risk advisor across the organization.

The role combines DFIR expertise with program-building, cross-functional leadership, and executive-level reporting to drive risk reduction and policy enforcement.

Qualifications

• Minimum 5+ years in insider risk, digital forensics, incident response, or cybersecurity investigations, incl. 2+ years in leadership.
• Experience standing up or maturing insider risk programs, with policy and governance.
• Expertise with digital forensic tools and scripting for automation and analysis.
• Advanced forensic knowledge of Windows/macOS/Linux, memory analysis, log parsing.
• Hands-on with EDR, SIEM, DLP, and UEBA; cloud logging capabilities.

Responsibilities

• Own end-to-end insider risk program strategy, roadmap, policies, playbooks, and metrics.
• Build and mentor a team of investigators and analysts; define roles and career paths.
• Design detection/monitoring using SIEM, EDR, DLP, UEBA, and cloud logs.
• Oversee investigations with forensics rigor and chain-of-custody integrity.
• Develop risk-scoring and analytics to prioritize high-risk activity.
• Coordinate with Security, Legal, HR, IT, and Engineering leadership; advise senior stakeholders.
• Provide executive reporting on program health, trends, and KPIs.
• Define tooling strategy for forensics, monitoring, case management, analytics.
• Lead insider risk awareness training and tabletop exercises.
• Track evolving insider threat TTPs and regulatory requirements.

Job description

TikTok USDS Joint Venture LLC is seeking an Insider Risk Program Lead to own the strategy, maturity, and daily operations of the insider risk program. You will define vision, build a team of investigators, establish policy frameworks, and serve as the senior insider risk advisor across the organization.

The role combines DFIR expertise with program-building, cross-functional leadership, and executive-level reporting to drive risk reduction and policy enforcement.