Privacy & Cybersecurity Counsel

Cybersecurity Jobs; Los Angeles (CA); On-site; USD 217,000 - 398,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) with company match

Paid parental leave

Disability coverage

Life insurance

Wellbeing benefits

Paid holidays

Job summary

TikTok USDS JV in Los Angeles is seeking a Privacy & Cybersecurity Counsel to oversee U.S. privacy regulatory compliance and cybersecurity matters. This on-site legal role partners with product and security teams to align privacy by design with incident response and vendor risk programs.

The ideal candidate has a J.D. from an ABA-accredited school, 15+ years of practice, and active U.S. bar membership, with deep knowledge of state privacy laws, data processing agreements, and regulatory

Qualifications

• J.D. degree from ABA-accredited law school and active bar membership.
• 15+ years of law practice in privacy/cybersecurity at tech platforms.
• Hands-on with U.S. privacy laws, international transfers, and cybersecurity standards.
• Ability to work with cross‑functional/global teams and build processes.

Responsibilities

• Coordinate changes to U.S. privacy laws and state requirements.
• Lead PIAs and embed Privacy by Design with product roadmaps.
• Oversee data retention, mapping, and subject access requests.
• Lead Enterprise Incident Response, including risk assessments.
• Manage regulatory notifications and law enforcement outreach.
• Draft/negotiate Data Processing Agreements and vendor contracts.
• Advise on privacy/cybersecurity due diligence and third‑party risk.

Skills

Privacy law expertise

Regulatory compliance

Incident response leadership

Drafting and negotiation

Education

J.D. from ABA-accredited law school

Active U.S. state bar

Tools

NIST

ISO 27001

Job description

The Privacy & Cybersecurity Counsel position at TikTok USDS JV is an onsite legal role based in Los Angeles, focused on U.S. privacy regulatory compliance and cybersecurity matters. The role provides legal support across incident response, vendor and data processing risk, and engagement with regulators and enforcement bodies.

Location and Compensation

Location: Los Angeles, CA (onsite)

Salary: USD 217,360 to 398,240 per year

Employees also receive 10 paid holidays per year, 10 paid sick days per year, and 17 days of Paid Personal Time (prorated upon hire with increasing accruals by tenure).

Key Responsibilities

• Coordinate, monitor, and advise on changes to U.S. privacy laws and regulations, with emphasis on state-level privacy requirements and AI governance rules.
• Support Privacy Impact Assessments (PIAs) and partner with security and product teams to integrate Privacy by Design into JV roadmaps.
• Coordinate and oversee policies covering data retention, data mapping, and subject access requests.
• Act as legal lead on the Enterprise Incident Response team, directing privilege handling, risk assessments, and containment actions during data breaches or security incidents.
• Independently manage and coordinate necessary regulatory notifications and law enforcement outreach.
• Partner closely with the Security Officer and the security organization.
• Draft, review, and negotiate Data Processing Agreements and assist with complex technology vendor contracts.
• Advise corporate teams on privacy and cybersecurity due diligence.
• Support Third Party Risk Management processes as necessary.
• Represent the company before data protection authorities and state or federal regulatory bodies as needed.
• Coordinate with outside counsel on privacy or cybersecurity litigation and enforcement defense.

Required Qualifications

• Education: J.D. Degree from an ABA-accredited law school.
• Licensure: Active membership in good standing with a U.S. state bar.
• Experience: 15+ years of law practice, including experience at a fast-paced technology platform company focused on data protection, privacy, and cybersecurity.
• Hands‑on experience with U.S. federal and state privacy legislation, international transfer frameworks, and cybersecurity standards (e.g., NIST, ISO 27001).
• Ability to work independently and collaboratively with cross‑functional and global teams across time zones, including building processes from scratch.
• Excellent analytical, writing, and communication skills.
• Ability to manage complex incident responses and prioritize competing demands and long‑term projects.

Preferred Certifications

• IAPP certifications preferred: CIPP/US, CIPP/E, CIPM, or CIPT.

Tools and Standards

• NIST
• ISO 27001

Benefits

• Medical, dental, and vision insurance (day one access)
• 401(k) savings plan with company match
• Paid parental leave
• Short‑term and long‑term disability coverage
• Life insurance
• Wellbeing benefits
• 10 paid holidays per year
• 10 paid sick days per year
• 17 days of Paid Personal Time (prorated upon hire with increasing accruals by tenure)
• Additional discretionary bonuses/incentives and restricted stock units (role may be eligible)

Fair Chance and Equal Opportunity Information

For Los Angeles County (unincorporated) candidates: Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state, and local laws, including the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.

Reasonable Accommodation

USDS is committed to providing reasonable accommodations in recruitment processes for candidates with disabilities, pregnancy, sincerely held religious beliefs, or other reasons protected by applicable laws.