IT Audit Manager

TikTok USDS Joint Venture; San Jose (CA); On-site; USD 116,000 - 245,000; Full time

Job summary

TikTok USDS Joint Venture seeks a hands‑on Technology Audit Leader to drive end‑to‑end technology and cybersecurity audits across the US. You will translate complex risks into clear business impacts for senior leadership and guide remediation with cross‑functional teams.

The role emphasizes risk‑based programs, cloud and security controls, and collaboration with Engineering, Security, Compliance and Product to strengthen the control environment.

Qualifications

• 10+ years of IT audit experience in tech, consulting, or regulated industries.
• Strong knowledge of technology risk frameworks and standards.
• Experience managing in‑house teams and co‑source/third‑party partners.
• Ability to collaborate with IT, security, compliance, and engineering teams.
• Willingness to travel domestically and internationally.

Responsibilities

• Lead end‑to‑end technology and IT audit engagements across risk areas.
• Develop risk‑based audit programs and perform hands‑on testing.
• Assess cloud, cybersecurity, IAM, SDLC, DevOps, and data protection controls.
• Evaluate SDLC, change management, and automated deployment processes.
• Present findings to senior leadership and track remediation progress.

Skills

IT audit

risk assessment

leadership

cloud/infrastructure security

data analytics

cross‑functional collaboration

Education

Bachelor's degree in Information Systems, Computer Science, Accounting, or Finance

Tools

CISA

NIST

ISO 27001

COBIT

SOC 2

COSO

Job description

Responsibilities

Team Introduction

Internal Audit plans and executes audit projects according to our risk-based audit plan, and evaluates the efficiency and effectiveness of financial, compliance, operational, and IT processes and controls. We collaborate with business functions in addressing risks and improving the control environment through timely and comprehensive audit work and remediation action tracking.

We are seeking a hands‑on Technology Audit Leader to lead and execute complex technology and cybersecurity audits across the USDS Joint Venture. This role requires strong technical audit expertise, the ability to independently perform end‑to‑end audit work, and the judgment to translate complex technology risks into clear business impacts for senior leadership.

Responsibilities

• Lead and independently execute end‑to‑end technology and IT audit engagements, including risk assessment, scoping, planning, walkthroughs, fieldwork, control testing, issue development, reporting, and remediation validation.
• Develop risk‑based audit programs and perform hands‑on testing across IT general controls, application controls, automated controls, technology‑dependent business processes, and cybersecurity controls.
• Assess technology risks across cloud infrastructure, cybersecurity, identity and access management, software development lifecycle, DevOps, CI/CD, vulnerability management, data security, privacy, infrastructure, applications, and third‑party technology services.
• Evaluate cloud and infrastructure security controls, including privileged access, configuration management, network security, logging and monitoring, vulnerability management, and data protection.
• Assess SDLC and engineering controls, including source code management, change management, CI/CD pipelines, release management, production access, and automated deployment processes.
• Conduct technology risk assessments and identify emerging risks and control gaps across a complex and rapidly evolving technology environment.
• Apply relevant technology and security frameworks and standards, including CISA, NIST, ISO 27001, COBIT, SOC 2, and COSO.
• Use data analytics, automation, and technology‑enabled audit techniques to improve audit coverage, testing efficiency, and risk identification.
• Quantify technology risk exposure and clearly articulate the operational, regulatory, security, financial, and business impacts of audit findings to senior leadership.
• Develop practical, value‑added recommendations and partner with Engineering, Security, Infrastructure, Privacy, Compliance, Product, and other technology teams to strengthen the control environment.
• Participate in the annual USDS IT risk assessment and develop the risk‑based technology audit plan in partnership with the Head of USDS Internal Audit.
• Review audit workpapers and deliverables for technical accuracy, completeness, and compliance with Internal Audit methodology while providing hands‑on coaching and technical guidance to auditors and co‑source resources.
• Manage technology audit co‑source partners while maintaining direct ownership of audit scope, execution, conclusions, quality, and deliverables.
• Support the development and growth of the in‑house technology audit team, including future IT audit hires, technical training, audit methodology, and best practices.
• Collaborate with Global Internal Audit on joint technology audit initiatives, risk assessments, methodology, and cross‑functional projects.
• Monitor emerging technology, cybersecurity, regulatory, and industry developments and incorporate relevant risks into the audit plan.
• Present audit results, significant technology risks, and remediation progress to senior leadership and relevant governance forums.
• Adapt to the evolving needs of the USDS Internal Audit function and take on additional responsibilities as the technology risk landscape and organization develop.

Qualifications

Minimum Qualifications:

• 10+ years of IT audit experience, ideally in a technology company, consulting firm, or highly regulated industry.
• Bachelor’s degree or higher in Information Systems, Computer Science, Accounting, Finance, or a related field.
• Strong understanding of technology risk frameworks and industry standards, including CISA, NIST, ISO 27001, COBIT, SOC 2, and relevant regulatory requirements.
• Experience managing in‑house teams and co‑source/third‑party audit partners and leading complex audit engagements.
• Experience engaging with IT, security, compliance, and engineering teams to assess risks and controls. Ability to work in a fast‑paced, evolving environment with shifting priorities.
• Strong interpersonal skills with a collaborative, relationship‑driven approach. Willingness to travel domestically and internationally, depending on the audit area.

Preferred Qualifications:

• Professional certifications preferred: CPA, CIA, CISA, CISSP, CRISC, or equivalent.
• Experience auditing large‑scale cloud environments such as AWS, Azure, or GCP.
• Experience auditing cybersecurity, privacy, data governance, AI/ML, platform security, or highly regulated technology environments.
• Experience using data analytics, scripting, automation, or AI‑enabled tools to enhance audit testing and risk assessment.
• Excellent communication, interpersonal, and written skills.

About USDS

TikTok USDS Joint Venture LLC is dedicated to the safety and security of millions of Americans who create, discover, and connect with what they love on the apps we operate. The Joint Venture has been established in compliance with the Executive Order signed by President Trump on September 25, 2025. Our foundation is a comprehensive data privacy and cybersecurity program we operate under defined safeguards to protect national security and secure U.S. user data, apps and the algorithm. We safeguard the U.S. content ecosystem, holding decision‑making authority for trust and safety policies and moderation. USDS Joint Venture helps ensure Americans can continue to express their creativity, discover new hobbies and interests, and build thriving communities and businesses on a global scale.

On‑site presence across teams allows the company to operate with greater speed, alignment, and agility — especially in areas like real‑time decision‑making, team development, and integrated execution. As such, the company is shifting from a hybrid work model to a fully in‑person schedule up to 5 days a week.

Why Join Us

Inspiring creativity is at the core of TikTok's mission. Our innovative product is built to help people authentically express themselves, discover and connect – and our global, diverse teams make that possible. Together, we create value for our communities, inspire creativity and bring joy - a mission we work towards every day.

We strive to do great things with great people. We lead with curiosity, humility, and a desire to make impact in a rapidly growing tech company. Every challenge is an opportunity to learn and innovate as one team. We're resilient and embrace challenges as they come. By constantly iterating and fostering an "Always Day 1" mindset, we achieve meaningful breakthroughs for ourselves, our company, and our users. When we create and grow together, the possibilities are limitless. Join us.

Diversity & Inclusion

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

USDS Reasonable Accommodation

USDS is committed to providing reasonable accommodations in our recruitment processes for candidates with disabilities, pregnancy, sincerely held religious beliefs or other reasons protected by applicable laws. If you need assistance or a reasonable accommodation, please reach out to us at https://tinyurl.com/USDS-RA

Job Information

【For Pay Transparency】Compensation Description (Annually)

The base salary range for this position in the selected city is $115556 - $244800 annually.

Compensation may vary outside of this range depending on a number of factors, including a candidate’s qualifications, skills, competencies and experience, and location. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work, and this role may be eligible for additional discretionary bonuses/incentives, and restricted stock units.

Benefits may vary depending on the nature of employment and the country work location. Employees have day one access to medical, dental, and vision insurance, a 401(k) savings plan with company match, paid parental leave, short‑term and long‑term disability coverage, life insurance, wellbeing benefits, among others. Employees also receive 10 paid holidays per year, 10 paid sick days per year and 17 days of Paid Personal Time (prorated upon hire with increasing accruals by tenure).

The Company reserves the right to modify or change these benefits programs at any time, with or without notice.

For Los Angeles County (unincorporated) Candidates: Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state, and local laws including the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Our company believes that criminal history may have a direct, adverse and negative relationship on the following job duties, potentially resulting in the withdrawal of the conditional offer of employment:

1. Interacting and occasionally having unsupervised contact with internal/external clients and/or colleagues;

2. Appropriately handling and managing confidential information including proprietary and trade secret information and access to information technology systems; and

3. Exercising sound judgment.