GRC Risk Management Analyst: Drive Security Risk & Compliance

TikTok USDS Joint Venture; New York (NY); On-site; USD 99,000 - 196,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid parental leave

Paid time off

Job summary

TikTok USDS Joint Venture LLC is seeking a GRC Risk Management Analyst to drive risk identification, assessment, and remediation across security, privacy, and compliance domains. You will lead risk register lifecycle steps, assign ownership, and work with stakeholders to implement mitigation strategies.

The role requires 3+ years in IT/cyber risk and experience communicating risk to technical and non-technical audiences.

Qualifications

• 3+ years in IT, cyber, or enterprise risk management in a fast-paced tech environment.
• Hands-on risk assessments, risk registers, and remediation tracking; familiarity with FAIR, NIST RMF, ISO 31000, COBIT.
• Ability to translate technical risk for non-technical stakeholders and drive alignment.
• Experience reporting KRIs/KPIs in a global enterprise and fostering risk-informed decisions.
• Excellent communication; ability to influence without authority.
• Teamwork and collaboration across global, multi-functional teams; strong organizational skills.

Responsibilities

• Partner with cross-functional business units to track, reduce, and mitigate security, privacy, and compliance risks.
• Support risk taxonomy level alignment with partner teams and leadership.
• Develop and document risk intake and analysis processes in line with security principles.
• Review data sources to identify trends for risk prioritization and assessment.
• Help define risk signals and implement quantification models (e.g., FAIR).
• Support Privacy Impact Assessments and mature risk reporting (KPIs/KRIs).
• Drive automation in data collection and participate in special projects.

Skills

Risk assessment

KRIs/KPIs reporting

Communication

Stakeholder management

Cross-functional collaboration

Education

CRISC

FAIR

CISA

CISSP

Tools

NIST RMF

COBIT

ISO 31000

Job description

TikTok USDS Joint Venture LLC is seeking a GRC Risk Management Analyst to drive risk identification, assessment, and remediation across security, privacy, and compliance domains. You will lead risk register lifecycle steps, assign ownership, and work with stakeholders to implement mitigation strategies.

The role requires 3+ years in IT/cyber risk and experience communicating risk to technical and non-technical audiences.