Cybersecurity & Privacy Risk Leader

TikTok USDS Joint Venture; New York (NY); On-site; USD 200,000 - 374,000; Full time

Job summary

TikTok USDS Joint Venture is seeking an experienced Security, Compliance and Privacy Risk Management Lead to define and scale a comprehensive risk program across cybersecurity, compliance and data privacy. You will guide escalation, governance, and risk metrics for executive oversight and board reporting.

The role requires building a high‑performing team, applying quantitative methods (e.g., FAIR), and embedding risk‑informed decision making across global teams in a fast‑paced environment.

Qualifications

• 10+ years of progressive experience in IT, Security/Cyber, Privacy or Enterprise Risk Management in a fast-paced tech environment.
• 2+ years of direct people management experience with a proven track record of building, mentoring, and leading risk teams.
• Deep knowledge of industry frameworks such as FAIR, NIST RMF, NIST CSF, ISO 27001, ISO 31000, or COBIT; strong analytical and writing skills.

Responsibilities

• Direct and mature the organization’s enterprise cybersecurity, compliance and data privacy risk programs; design and implement a centralized process to drive security, privacy, and compliance risk identification, mitigation, and prevention
• Ensure compliance and alignment with frameworks and standards such as NIST RMF, NIST CSF, ISO 27001, ISO 31000, MTL, etc.
• Oversee Security and Privacy Risk Assessments, Privacy Impact Assessments (PIAs), Security Impact Analysis, Security Control evaluations and support any internal or external audits as needed
• Build and maintain risk dashboards, registers, and metrics for executive leadership and board oversight
• Establish, refine, and enforce risk management methodologies, documentation practices, and policies to ensure uniform execution across teams and mission areas
• Develop strategies that improve organizational resilience by anticipating systemic risks, identifying high‑impact asset exposures, and driving prioritized mitigation
• Partner with Risk Owners, Legal, Product, Security and Privacy teams, Internal/External Audit teams, and IT Operations to build privacy‑by‑design and secure‑by‑design principles to strengthen the company’s risk posture
• Partner with product, legal, and privacy stakeholders to embed privacy risk management practices across data lifecycle decisions, assessments, and control design
• Lead, coach, and scale a team of risk analysts, and privacy professionals

Skills

Enterprise risk management

Risk frameworks (FAIR, NIST RMF, NIST

Leadership / people management

Risk analytics / writing

Job description

TikTok USDS Joint Venture is seeking an experienced Security, Compliance and Privacy Risk Management Lead to define and scale a comprehensive risk program across cybersecurity, compliance and data privacy. You will guide escalation, governance, and risk metrics for executive oversight and board reporting.

The role requires building a high‑performing team, applying quantitative methods (e.g., FAIR), and embedding risk‑informed decision making across global teams in a fast‑paced environment.