TPRM Analyst: Vendor Risk & Compliance Lead

TikTok USDS Joint Venture; San Jose (CA); On-site; USD 99,000 - 196,000; Full time

Job summary

TikTok USDS Joint Venture LLC is seeking a Third Party Risk Management analyst to own vendor compliance screening, vulnerability management, and cross-functional security control assurance across USDS. You will coordinate with Procurement and Legal to implement and communicate requirements to business owners and program managers.

You will work with USDS Risk Management and Global Security to manage assessments for site visits at TikTok USDS data centers and CDNs, while guiding ongoing lifecycle

Qualifications

• Bachelor’s degree in risk management or equivalent privacy, security, compliance, project management, or related discipline.

Responsibilities

• Coordinate vendor lifecycle management, contract clauses verification and compliance procedures.
• Technical writing and communication between cross-functional teams and non-USDS lines of business.
• Validate vendor compliance screening assessments.
• Report vendor security risk assessments for authorized and rejected vendors.
• Coordinate with USDS Risk Management, Global Security Organization, and internal teams on unresolved findings and vulnerability management.
• Enhance USDS TPRM standard operating procedures for emerging threats and policy requirements.
• Validate security standard controls and audits within the TPRM program.
• Manage assessment lifecycles and dashboard reporting.
• Coordinate and execute site visit assessments and reporting for TikTok USDS data centers and CDNs.

Skills

Technical writing

Verbal communication

Findings & vulnerability management

Critical thinking

Education

Bachelor’s degree in risk management or equivalent privacy, security, compliance, project management, or like discipline

Job description

TikTok USDS Joint Venture LLC is seeking a Third Party Risk Management analyst to own vendor compliance screening, vulnerability management, and cross-functional security control assurance across USDS. You will coordinate with Procurement and Legal to implement and communicate requirements to business owners and program managers.

You will work with USDS Risk Management and Global Security to manage assessments for site visits at TikTok USDS data centers and CDNs, while guiding ongoing lifecycle