Senior IT Compliance & Security Controls Analyst

TikTok; San Jose (CA); On-site; USD 112,000 - 162,000; Full time

Job summary

TikTok is seeking a Senior IT Compliance Analyst within our Global Security Organization to mature IT control environments across Access, Change, and Monitoring. You will partner with Legal/Compliance, Product, and Engineering to ensure robust, testable controls across in-scope systems.

Responsibilities span governance, system discovery, control operations, audit readiness, and remediation in a fast-paced security-focused team.

Qualifications

• Strong knowledge of General IT Controls across Access Management, Change Management and System Monitoring.
• Ability to read code repository configurations, CI/CD pipeline settings, and monitoring configurations.
• Experience with system discovery, process mapping, control narrative development, and audit population extraction.
• Proven track record building and managing large-scale compliance programs with regulators or auditors.
• Excellent analytical, communication, and problem-solving skills; translates complex concepts clearly.
• Ability to work independently in a fast-paced, ambiguous environment.

Responsibilities

• Strategy & Governance: support GITC strategy, audit readiness roadmap, and control maturity initiatives.
• System Discovery & Scoping: assist in identifying in-scope systems and business processes.
• Control Operations & Execution: support access/change/system monitoring controls and user access reviews.
• Audit Readiness & Testing: assist with readiness reviews, evidence collection, and audit testing.
• Gap Remediation & External Audit Support: help coordinate remediation and auditor inquiries.

Skills

General IT Controls

Audit coordination

Regulatory compliance

Analytical thinking

Independent work

Education

Bachelor's degree (Law/CS/InfoSec/Business)

Tools

Python

SQL

Job description

TikTok is seeking a Senior IT Compliance Analyst within our Global Security Organization to mature IT control environments across Access, Change, and Monitoring. You will partner with Legal/Compliance, Product, and Engineering to ensure robust, testable controls across in-scope systems.

Responsibilities span governance, system discovery, control operations, audit readiness, and remediation in a fast-paced security-focused team.