Vendor Risk & Compliance Strategist (TPRM)

TikTok USDS Joint Venture; Washington (District of Columbia); On-site; USD 89,000 - 176,000; Full time

Job summary

TikTok USDS Joint Venture LLC seeks a Third Party Risk Management analyst to oversee vendor compliance screening, vulnerability management, and cross-functional security coordination. You will own daily operations of vendor assessments and lifecycle management, coordinating with Procurement and Legal to enforce policies.

The role requires strong technical writing, risk reporting, and experience in risk controls.

Qualifications

• Bachelor’s degree in risk management or equivalent privacy, security, compliance discipline.
• 3+ years of third party risk management or related privacy/security experience.
• Technical writing and verbal communication skills for executive reporting on risk metrics.
• Findings and vulnerability management experience related to web vulnerabilities and cybersecurity issues.

Responsibilities

• Coordinating vendor lifecycle management, contract clauses verification and compliance procedures with USDS teams.
• Technical writing and communication between cross-functional teams and Non-USDS lines of business.
• Validating vendor compliance screening assessments.
• Reporting vendor security risk assessments for authorized and rejected vendors.
• Coordinating with Risk Management, Global Security, and other teams on unresolved findings and vulnerability management.
• Enhancing TPRM SOPs for emerging threats and policy requirements.
• Validating security controls and audits for the TPRM program.
• Managing assessment lifecycles and dashboard reporting.
• Coordinating site visit assessments and reporting for TikTok USDS data centers/CDNs.

Skills

Bachelor's in risk mgmt

3+ years TPRM/privacy-security

Technical writing

Vulnerability management

Decision-making

Education

Bachelor's degree in risk management

Job description

TikTok USDS Joint Venture LLC seeks a Third Party Risk Management analyst to oversee vendor compliance screening, vulnerability management, and cross-functional security coordination. You will own daily operations of vendor assessments and lifecycle management, coordinating with Procurement and Legal to enforce policies.

The role requires strong technical writing, risk reporting, and experience in risk controls.