External Security & Privacy Inquiry Lead

TikTok USDS Joint Venture

New York (NY)

On-site

USD 99,000 - 196,000

Full time

9 days ago

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

TikTok USDS JV is seeking a proactive External Inquiry Analyst, Security & Privacy. This high-visibility role will design, implement, and scale the External Security & Privacy Inquiry function from scratch, handling complex security and privacy questionnaires from enterprise clients, vendors, and government bodies.

You will bridge security, Legal, Communications, and Commercial teams to ensure accurate external posture while supporting the sales process.

Qualifications

4+ years of applicable experience in Information Security, Privacy, IT Audit, Third-Party Risk Management (TPRM), or Technical Compliance within a complex, high-growth technology enterprise or highly regulated environment.
Bachelor’s degree in Information Security, Computer Science, Risk Management, Cybersecurity Policy, or a related technical/business discipline.
Strong foundational understanding of 2nd Line of Defense (2LoD) principles, data residency/sovereignty concepts, data boundaries, network architecture, and major compliance frameworks (SOC 2 Type II, ISO 27001, PCI-DSS, NIST CSF/800-53).
Exceptional written and verbal communication skills, with a demonstrated ability to translate dense technical architecture and legal/compliance mandates into clear, executive-ready, and defensible external documentation.
Demonstrated ability to thrive in ambiguous, fast-paced environments, take complete ownership of vague mandates, and build structure, SLAs, and processes independently without hands-on management.
Strong project management and interpersonal skills, with a proven ability to lead cross-functional working groups and influence stakeholders across Legal, Communications, Public Policy, Product, and Engineering.

Responsibilities

Design, build, and scale the USDS JV External Security & Privacy Inquiry function from the ground up, defining response SLAs, escalation paths, cross-functional review frameworks, and quality standards.
Lead end-to-end intake, analysis, drafting, and delivery of complex external security, privacy, and data boundary inquiries from enterprise clients, advertisers, strategic partners, and government bodies.
Facilitate cross-functional working groups, aligning with Legal, Communications, Public Policy, Technical SMEs, and Business Development on sensitive disclosures, custom FAQs, and overall response strategies.
Maintain a centralized knowledge base and customer-facing trust documentation to streamline future inquiry lifecycles and eliminate redundant SME review cycles.
Partner closely with enterprise sales, business development, and commercial teams to understand deal pipelines, identify security blockers early in the sales lifecycle, and deliver tailored trust assurance that satisfies client security assessments without oversharing sensitive internal IP.
Collaborate with internal engineering and CGRM teams to leverage AI risk platforms, automated intake tools, and LLM-assisted repository searching to efficiently develop responses and reduce manual administrative overhead on technical SMEs.
Translate complex technical evidence, 2nd Line of Defense controls, and third-party attestations (e.g., SOC 2, ISO 27001, PCI-DSS) into clear, external-ready narratives.
Jointly triage inbound inquiries with Global Security counterparts, taking ownership of USDS JV topics while co-managing global architecture questions to deliver unified responses to external stakeholders.