Privacy Compliance Program Manager - USDS

TikTok; San Jose (CA); On-site; USD 150,000 - 230,000; Full time

Job summary

TikTok is seeking a Privacy Compliance Program Manager for USDS to lead privacy initiatives across global and US teams, aligning operations with the Privacy Compliance Framework.

The role requires coordinating with R&D/PDPO, conducting risk assessments, and developing policies to strengthen privacy controls within a large enterprise environment in the United States.

Qualifications

• 5+ years in privacy/security, auditing, consulting, or technical program management.
• Strong communication, interpersonal, and project management skills.
• Excellent knowledge of industry standards (NIST, ISO, IAPP, etc.) and understanding of laws like GDPR, CCPA, COPPA.
• Familiarity with PIA/DPIA methods and practical privacy control proposals based on risk assessments.
• Ability to navigate complexities in a large enterprise environment.

Responsibilities

• Serve as the team subject matter expert on privacy compliance initiatives and functions, collaborating with global PDPO to ensure alignment with the global privacy compliance framework (PCF).
• Promote the global framework within USDS operating arms.
• Support privacy compliance assessments, identifying gaps in the alignment of operations with the global Privacy Compliance Framework (PCF), including privacy controls and safeguards across products.
• Draft and implement policies, processes, and SOPs to formalize privacy compliance practices and improve privacy operations at USDS, contributing to the global privacy framework.
• Build strong relationships with global and US stakeholders, including R&D/PDPO and US privacy teams, championing privacy best practices and integrating them into USDS operations.
• Support privacy risk assessments, providing recommendations to mitigate risks and enhance compliance.
• Lead global awareness programs and develop training for USDS teams to understand privacy requirements, establishing long-term communication channels.
• Maintain knowledge of relevant privacy laws, regulations, and industry best practices, representing the company's privacy priorities effectively.
• Demonstrate empathy towards business and engineering considerations while advocating for robust privacy practices.
• Engage in special projects as the team expands and capabilities grow.

Skills

Privacy program management

Communication

Privacy regulations

PIA/DPIA methods

Enterprise navigation

Job description

Privacy Compliance Program Manager - USDS

Responsibilities

1. Serve as the team subject matter expert on privacy compliance initiatives and functions, collaborating with global PDPO to ensure alignment with the global privacy compliance framework (PCF). Promote the global framework within USDS operating arms.
2. Support privacy compliance assessments, identifying gaps in the alignment of operations with the global Privacy Compliance Framework (PCF), including privacy controls and safeguards across products.
3. Draft and implement policies, processes, and SOPs to formalize privacy compliance practices and improve privacy operations at USDS, contributing to the global privacy framework.
4. Build strong relationships with global and US stakeholders, including R&D/PDPO and US privacy teams, championing privacy best practices and integrating them into USDS operations.
5. Support privacy risk assessments, providing recommendations to mitigate risks and enhance compliance.
6. Lead global awareness programs and develop training for USDS teams to understand privacy requirements, establishing long-term communication channels.
7. Maintain knowledge of relevant privacy laws, regulations, and industry best practices, representing the company's privacy priorities effectively.
8. Demonstrate empathy towards business and engineering considerations while advocating for robust privacy practices.
9. Engage in special projects as the team expands and capabilities grow.

Qualifications

• 5+ years in privacy/security, auditing, consulting, or technical program management, with a proven track record managing privacy/security programs.
• Strong communication, interpersonal, and project management skills.
• Excellent knowledge of industry standards (NIST, ISO, IAPP, etc.) and understanding of laws like GDPR, CCPA, COPPA.
• Familiarity with PIA/DPIA methods and practical privacy control proposals based on risk assessments.
• Ability to navigate complexities in a large enterprise environment.

Preferred Qualifications

• Background in software/security/privacy engineering in a global enterprise.
• Experience delivering organizational change in privacy or technical audit fields.
• Certifications such as CISSP, CRISC, CIPP/E, CIPM are advantageous.