Senior IT Compliance & Security Controls Analyst

TikTok; San Jose (CA); Sur place; USD 112 000 - 162 000; Plein temps

Résumé du poste

TikTok is seeking a Senior IT Compliance Analyst within our Global Security Organization to mature IT control environments across Access, Change, and Monitoring. You will partner with Legal/Compliance, Product, and Engineering to ensure robust, testable controls across in-scope systems.

Responsibilities span governance, system discovery, control operations, audit readiness, and remediation in a fast-paced security-focused team.

Qualifications

• Strong knowledge of General IT Controls across Access Management, Change Management and System Monitoring.
• Ability to read code repository configurations, CI/CD pipeline settings, and monitoring configurations.
• Experience with system discovery, process mapping, control narrative development, and audit population extraction.
• Proven track record building and managing large-scale compliance programs with regulators or auditors.
• Excellent analytical, communication, and problem-solving skills; translates complex concepts clearly.
• Ability to work independently in a fast-paced, ambiguous environment.

Responsabilités

• Strategy & Governance: support GITC strategy, audit readiness roadmap, and control maturity initiatives.
• System Discovery & Scoping: assist in identifying in-scope systems and business processes.
• Control Operations & Execution: support access/change/system monitoring controls and user access reviews.
• Audit Readiness & Testing: assist with readiness reviews, evidence collection, and audit testing.
• Gap Remediation & External Audit Support: help coordinate remediation and auditor inquiries.

Connaissances

General IT Controls

Audit coordination

Regulatory compliance

Analytical thinking

Independent work

Formation

Bachelor's degree (Law/CS/InfoSec/Business)

Outils

Python

SQL

Description du poste

TikTok is seeking a Senior IT Compliance Analyst within our Global Security Organization to mature IT control environments across Access, Change, and Monitoring. You will partner with Legal/Compliance, Product, and Engineering to ensure robust, testable controls across in-scope systems.

Responsibilities span governance, system discovery, control operations, audit readiness, and remediation in a fast-paced security-focused team.