Global Head of Validation, Security & Privacy

TikTok USDS Joint Venture; San Jose (CA); On-site; USD 250,000 - 420,000; Full time

Job summary

TikTok USDS Joint Venture LLC seeks a Head of Validation to lead Vulnerability Management, Validation Engineering, Cyber & Privacy Validation, and Generative AI & Content Assurance Validation. The role directs end-to-end testing, threat-informed defense, and independent validation across global teams, reporting to senior leadership.

You will drive strategy, governance, and metrics to demonstrate security posture and risk reduction while collaborating with product, privacy, and legal teams.

Qualifications

• 15+ years in information security with leadership of multi-team groups.
• Experience building or scaling offensive security or validation functions.
• Ability to translate technical findings into risk statements for executives.
• Experience across cloud, infrastructure, applications, identity, and data.
• Strong track record working with cross-functional teams while staying independent.

Responsibilities

• Build and lead a global Validation organization that provides objective evidence on controls in practice.
• Own full discovery to remediation cycle, including red teaming, testing, and measurement.
• Set strategy for offensive testing and balance broad exercises with focused tests by risk.
• Run Vulnerability Management at enterprise scale with emphasis on exploitable fixes.
• Verify fixes post-incident and ensure systems return to expected state.
• Measure security posture and communicate trends to executives and GRC stakeholders.
• Challenge controls across cyber defense, data protection, IAM, and privacy.
• Independently test generative AI, content assurance controls, and jailbreak tests.

Skills

Information security

Leadership

Offensive security

Executive communication

Threat modeling

Tools

MITRE ATT&CK

NIST CSF/800-53

ISO 27001

OWASP LLM Top 10

Job description

TikTok USDS Joint Venture LLC seeks a Head of Validation to lead Vulnerability Management, Validation Engineering, Cyber & Privacy Validation, and Generative AI & Content Assurance Validation. The role directs end-to-end testing, threat-informed defense, and independent validation across global teams, reporting to senior leadership.

You will drive strategy, governance, and metrics to demonstrate security posture and risk reduction while collaborating with product, privacy, and legal teams.