Strategic Vendor Risk & Compliance Analyst

TikTok USDS Joint Venture; New York (NY); On-site; USD 99,000 - 196,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

401(k) with company match

Paid parental leave

Paid holidays

Job summary

TikTok USDS Joint Venture LLC is seeking a Third Party Risk Management analyst to own vendor compliance screening, vulnerability management, and cross-functional control assurance. You will partner with USDS Procurement and Legal to implement and enforce vendor requirements across the business.

You will coordinate with risk teams to validate assessments, report risk findings, and manage the vendor lifecycle from onboarding through offboarding, including site visits to TikTok USDS data centers

Qualifications

• Bachelor’s degree in risk management or equivalent privacy, security, compliance, project management, or like discipline.
• 3+ years of third party risk management or related privacy/security experience.
• Technical writing and verbal communication skills for executive reporting on Third Party Risk metrics.
• Findings and vulnerability management experience relating to remediation of web vulnerabilities and cyber risks.
• Critical thinking and analytical decision making to forecast issues and risks pertaining to TPRM.

Responsibilities

• Coordinating between USDS TPRM, Procurement, and Legal operations on vendor lifecycle management and contract clauses verification.
• Technical writing and cross-functional communication with internal and external teams.
• Validating vendor compliance screening assessments.
• Reporting vendor security risk assessments for authorized and rejected vendors.
• Coordinating with Risk Management, Global Security, and other teams on unresolved findings and vulnerability management.
• Enhancing TPRM SOPs to address emerging threats and policy requirements.
• Validating security controls and audits for the TPRM program.
• Managing assessment lifecycles and dashboard reporting.
• Coordinating and executing site visit assessments (physical and remote) for TikTok USDS data centers and CDNs.

Skills

Vendor risk management

Technical writing

Vulnerability management

Executive reporting

Cross-functional collaboration

Education

Bachelor’s degree in risk management or related field

Tools

GRC Platform

Contract management tools

Job description

TikTok USDS Joint Venture LLC is seeking a Third Party Risk Management analyst to own vendor compliance screening, vulnerability management, and cross-functional control assurance. You will partner with USDS Procurement and Legal to implement and enforce vendor requirements across the business.

You will coordinate with risk teams to validate assessments, report risk findings, and manage the vendor lifecycle from onboarding through offboarding, including site visits to TikTok USDS data centers