Insider Risk Program Lead: Strategy & Investigations

TikTok USDS Joint Venture; Washington (District of Columbia); On-site; USD 206,000 - 397,000; Full time

Job summary

TikTok USDS Joint Venture seeks an Insider Risk Program Lead to own strategy, maturity, and day-to-day operations of the insider risk program. Lead a team of investigators, establish policy frameworks, and coordinate across Security, Legal, HR, IT, and Engineering.

The ideal candidate combines DFIR excellence with program-building experience and strong cross-functional leadership, including executive-facing communication.

Qualifications

• Bachelor’s degree in Cybersecurity or related field and minimum 5 years in insider risk/digital forensics or cybersecurity investigations.
• Experience standing up or maturing insider risk programs, with policy development and cross-functional governance.
• Expertise with digital forensic tools and scripting for automation and analysis.
• Knowledge of Windows/macOS/Linux for forensic investigations and log parsing.
• Hands-on with EDR, SIEM, DLP, and UEBA technologies and cloud logging.

Responsibilities

• Own the insider risk program strategy, maturity, and day-to-day operations.
• Build and mentor a team of investigators and analysts; set roles and development paths.
• Design detection/monitoring using SIEM, EDR, DLP, UEBA and cloud logs.
• Oversee investigations including data exfiltration, IP theft, and policy violations.
• Develop risk-scoring models and behavioral analytics for prioritization.
• Deliver executive reporting on program health, trends, and KPIs.

Skills

DFIR expertise

Team leadership

Policy development

Cross-functional collaboration

Scripting (Python, PowerShell)

Cloud logging (AWS/Azure/GCP)

Incident response

Executive communication

Education

Bachelor’s degree in Cybersecurity/related field

Master’s degree in Cybersecurity/Information Assurance (preferred)

Tools

EnCase

FTK

Cellebrite

PowerShell

Python

Job description

TikTok USDS Joint Venture seeks an Insider Risk Program Lead to own strategy, maturity, and day-to-day operations of the insider risk program. Lead a team of investigators, establish policy frameworks, and coordinate across Security, Legal, HR, IT, and Engineering.

The ideal candidate combines DFIR excellence with program-building experience and strong cross-functional leadership, including executive-facing communication.