GRC Risk & Compliance Analyst (Regulatory Focus)

TikTok Economic Impact; Washington (District of Columbia); On-site; USD 89,000 - 176,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

401(k) with company match

Paid parental leave

Short‑term and long‑term disability

Life insurance

Wellbeing benefits

10 paid holidays per year

10 paid sick days per year

17 days Paid Personal Time

Job summary

TikTok USDS Joint Venture LLC in Washington, DC is seeking an experienced risk professional to lead IT and cyber risk assessments across financial services workflows, supporting regulatory examinations and sponsor bank audits.

You will evaluate control environments against NIST CSF, ISO 27001 and SOC 2, collaborate with compliance and engineering teams, and help ensure timely remediation under stringent state and federal timelines.

Qualifications

• Bachelor’s degree or equivalent practical experience in information security, risk, compliance or related field.
• 4+ years in GRC, IT risk, security controls, audit readiness, or related areas.
• Experience with financial services, fintech or regulated environments.
• Familiarity with NIST RMF, ISO 27001, SOC 2, NIST CSF and related controls.

Responsibilities

• Perform IT and cyber risk assessments across workflows to identify vulnerabilities and assess residual risk.
• Serve as risk liaison during state examinations, FinCEN reviews, and sponsor bank audits.
• Evaluate control environment across cybersecurity, PCI‑DSS, and MTL obligations.
• Collaborate with FCC to mitigate cyber risks impacting BSA/AML and transaction monitoring systems.
• Develop and monitor metrics, KRIs, and KPIs related to MTL cyber compliance.
• Challenge first line on root cause analyses and ensure remediation plans meet timelines.
• Assess critical vendors and third parties for security posture and TPRM standards.
• Align Incident Response with regulatory breach notification timelines.

Skills

GRC

IT risk

Security controls

Audit readiness

Regulatory compliance

Data analytics

NIST RMF

ISO 27001

SOC 2

NIST CSF

CISSP (preferred)

Education

Bachelor’s degree in Information Security

Tools

GRC platforms

Job description

TikTok USDS Joint Venture LLC in Washington, DC is seeking an experienced risk professional to lead IT and cyber risk assessments across financial services workflows, supporting regulatory examinations and sponsor bank audits.

You will evaluate control environments against NIST CSF, ISO 27001 and SOC 2, collaborate with compliance and engineering teams, and help ensure timely remediation under stringent state and federal timelines.