GRC Cybersecurity Controls Analyst — Audit & Automation

TikTok USDS Joint Venture; Washington (District of Columbia); On-site; USD 89,000 - 176,000; Full time

Job summary

TikTok USDS Joint Venture is seeking a GRC Cybersecurity Controls Analyst to support the operation, testing, and continuous improvement of the controls framework and to drive audit readiness across security, privacy, and regulatory obligations.

The role will coordinate with control owners, product teams, and audit stakeholders to improve control design, evidence collection, and testing quality, while advancing GRC automation initiatives and scalable testing practices within a fast-paced

Qualifications

• Bachelor’s degree or equivalent in Information Security, Cybersecurity, IT, Risk/Compliance or related field.
• 3+ years in GRC, IT risk, security controls, audit readiness, or related area; experience with control testing and evaluating design/operating effectiveness.
• Experience gathering and assessing technical control evidence from stakeholders, systems, dashboards, or documentation repositories; familiarity with ISO 27001, NIST CSF, SOC 2, PCI-DSS.

Responsibilities

• Support maintenance and improvement of the controls framework descriptions, mappings, owners, evidence expectations, testing procedures and narratives.
• Perform control testing and validation across design, implementation and operating effectiveness.
• Review evidence submitted by owners to ensure it demonstrates control performance and meets audit expectations.
• Coordinate with owners, product teams and GRC stakeholders to resolve gaps and improve testing quality.
• Support internal and external audits, certifications and assessments such as ISO 27001, SOC 2, PCI, NIST CSF.
• Support GRC automation initiatives by defining requirements for workflow automation, monitoring, and scalable testing processes.
• Work with technical teams to understand tools, data sources, and opportunities to automate control validation.
• Contribute to high-quality documentation and defensible controls testing across the Controls & Certifications function.

Skills

GRC Analysis

Audit Readiness

Control Testing

Documentation

Cross-functional Collaboration

Education

Bachelor's degree or equivalent in Information Security / related

Tools

ISO 27001

SOC 2

NIST CSF

PCI-DSS

Job description

TikTok USDS Joint Venture is seeking a GRC Cybersecurity Controls Analyst to support the operation, testing, and continuous improvement of the controls framework and to drive audit readiness across security, privacy, and regulatory obligations.

The role will coordinate with control owners, product teams, and audit stakeholders to improve control design, evidence collection, and testing quality, while advancing GRC automation initiatives and scalable testing practices within a fast-paced