External Security & Privacy Inquiry Lead

TikTok USDS Joint Venture

New York (NY)

On-site

USD 147,000 - 374,000

Full time

9 days ago

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

TikTok USDS Joint Venture LLC is seeking an External Inquiry Lead, Security & Privacy to build and scale our external inquiry and trust assurance function from scratch. You will design a centralized workflow to field, triage, and respond to complex compliance questionnaires, external vendor and client security assessments, and regulatory questionnaires.

You will bridge Legal, Communications, Public Policy, Engineering, and commercial teams to communicate our external security posture and support

Qualifications

7+ years of applicable experience in Information Security, Privacy, IT Audit, Third-Party Risk Management (TPRM), or Technical Compliance within a complex, high-growth technology enterprise or highly regulated environment.
Bachelor’s degree in Information Security, Computer Science, Risk Management, Cybersecurity Policy, or a related technical/business discipline.
Strong understanding of 2nd Line of Defense (2LoD) principles, data residency/sovereignty concepts, data boundaries, network architecture, and major compliance frameworks (SOC 2 Type II, ISO 27001, PCI-DSS, NIST CSF/800-53).
Exceptional written and verbal communication skills, with a demonstrated ability to translate dense technical architecture and legal/compliance mandates into clear, executive-ready external documentation.
Demonstrated ability to thrive in ambiguous, fast-paced environments, take ownership of vague mandates, and build structure, SLAs, and processes independently without hands-on management.
Strong project management and interpersonal skills, with a proven ability to lead cross-functional working groups and influence stakeholders across Legal, Communications, Public Policy, Product, and Engineering.

Responsibilities

Design, build, and scale the USDS JV External Security & Privacy Inquiry function from the ground up, defining response SLAs, escalation paths, cross-functional review frameworks, and quality standards.
Lead the end-to-end intake, analysis, technical drafting, and delivery of complex external security, privacy, and data boundary inquiries from enterprise clients, advertisers, strategic partners, and government bodies.
Drive and facilitate cross-functional working groups, aligning with Legal, Communications, Public Policy, Technical SMEs, and Business Development on sensitive disclosures, custom FAQs, and overall response strategies.
Establish and maintain a centralized knowledge base and customer-facing trust documentation to streamline future inquiry lifecycles and eliminate redundant SME review cycles.
Partner closely with enterprise sales, business development, and commercial teams to understand deal pipelines, identify security blockers early in the sales lifecycle, and deliver tailored trust assurance that satisfies client security assessments without oversharing sensitive internal IP.
Collaborate with internal engineering and CGRM teams to leverage AI risk platforms, automated intake tools, and LLM-assisted repository searching to efficiently develop responses and reduce manual administrative overhead on technical SMEs.
Translate complex technical evidence, 2nd Line of Defense controls, and third-party attestations (e.g., SOC 2, ISO 27001, PCI-DSS) into clear, external-ready narratives.
Jointly triage inbound inquiries with Global Security counterparts, taking ownership of USDS JV topics while co-managing global architecture questions to deliver unified responses to external stakeholders.