GRC Cybersecurity Controls Specialist

TikTok Inc.; Washington (District of Columbia); On-site; USD 89,000 - 176,000; Full time

Job summary

TikTok USDS Joint Venture is seeking a GRC Cybersecurity Controls Analyst to join the GRC Controls & Certifications team. You will evaluate control design, operating effectiveness, and support audit readiness across cybersecurity, financial services, and regulatory obligations.

The role focuses on control testing, evidence review, and coordinating with control owners, product teams, and auditors, including areas like ISO 27001, SOC 2, PCI-DSS, and MTL obligations, with an emphasis on automation

Qualifications

• Bachelor’s degree or equivalent practical experience.
• 3+ years in GRC, IT risk, security controls, audit readiness, or related field.
• Experience with control testing, compliance, audit readiness, or risk management in regulated environments.

Responsibilities

• Maintain and improve controls framework descriptions, mappings, owners, evidence expectations, testing procedures, and narratives.
• Perform internal and external cybersecurity controls testing across ISO 27001, PCI-DSS, SOC 2, NIST CSF, and related frameworks; assess design and operating effectiveness.
• Support testing and documentation of controls in financial services and regulated payments (PCI-DSS, MTL) and audit-readiness activities.
• Map controls across cybersecurity, financial services, and regulatory requirements to reduce duplication and ensure coverage.
• Review submitted evidence to verify control performance and audit readiness.
• Coordinate with owners, product teams, and stakeholders to resolve evidence gaps and improve testing quality.
• Support GRC automation initiatives by defining requirements for workflow automation and scalable testing processes.
• Collaborate with security, engineering, and data teams to understand tools and evidence sources for automated validation.
• Contribute to high-quality documentation and defensible controls testing culture.

Skills

GRC controls

Audit readiness

Control testing

Regulatory frameworks

Documentation/writing

Cross-functional collaboration

Security controls

Education

Bachelor’s degree in related field

Job description

TikTok USDS Joint Venture is seeking a GRC Cybersecurity Controls Analyst to join the GRC Controls & Certifications team. You will evaluate control design, operating effectiveness, and support audit readiness across cybersecurity, financial services, and regulatory obligations.

The role focuses on control testing, evidence review, and coordinating with control owners, product teams, and auditors, including areas like ISO 27001, SOC 2, PCI-DSS, and MTL obligations, with an emphasis on automation