Vendor Risk & Compliance Analyst (TPRM)

TikTok USDS Joint Venture; Washington (District of Columbia); On-site; USD 90,000 - 140,000; Full time

Job summary

TikTok USDS Joint Venture is seeking a Third Party Risk Management (TPRM) analyst to own vendor compliance screening, vulnerability management, and cross-functional security control assurance within the USDS organization in Washington, DC.

You will coordinate with Procurement and Legal to ensure vendor program requirements are implemented, enforced, and communicated to business owners and program managers across internal teams.

Qualifications

• Bachelor's degree in risk management, privacy, security, compliance, project management, or related field.

Responsibilities

• Coordinate vendor lifecycle management, contract clauses verification, and compliance procedures.
• Prepare technical writings and facilitate cross-functional communications with non-USDS lines of business.
• Validate vendor compliance screening assessments.
• Report vendor security risk assessments for authorized and rejected vendors.
• Coordinate with Risk Management, Global Security, and other teams on findings and vulnerability management.
• Improve TPRM SOPs to address emerging threats and policy requirements.
• Validate security controls and audits within the TPRM program.
• Manage assessment lifecycles and dashboard reporting.
• Coordinate site visit assessments and reporting for TikTok USDS data centers and CDNs.

Skills

Technical writing

Verbal communication

Vulnerability management

TPRM experience

Analytical thinking

Education

Bachelor's degree in risk management

Job description

TikTok USDS Joint Venture is seeking a Third Party Risk Management (TPRM) analyst to own vendor compliance screening, vulnerability management, and cross-functional security control assurance within the USDS organization in Washington, DC.

You will coordinate with Procurement and Legal to ensure vendor program requirements are implemented, enforced, and communicated to business owners and program managers across internal teams.