Responsibilities
About TikTok
TikTok is the leading destination for short-form mobile video. Our mission is to inspire creativity and bring joy. TikTok has global offices including Los Angeles, New York, London, Paris, Berlin, Dubai, Singapore, Jakarta, Seoul and Tokyo.
Why Join Us
Creation is the core of TikTok's purpose. Our platform is built to help imaginations thrive. This is doubly true of the teams that make TikTok possible.
Together, we inspire creativity and bring joy - a mission we all believe in and aim towards achieving every day.
To us, every challenge, no matter how difficult, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.
At TikTok, we create together and grow together. That's how we drive impact - for ourselves, our company, and the communities we serve.
Join us.
About USDS
At TikTok, we're committed to a process of continuous innovation and improvement in our user experience and safety controls. We're proud to be able to serve a global community of more than a billion people who use TikTok to creatively express themselves and be entertained, and we're dedicated to giving them a platform that builds opportunity and fosters connection. We also take our responsibility to safeguard our community seriously, both in how we address potentially harmful content and how we protect against unauthorized access to user data.
U.S. Data Security (“USDS”) is a standalone entity of TikTok in the U.S. This new security-first division was created to bring heightened focus and governance to our data protection policies and content assurance protocols to keep U.S. users safe. Our focus is on providing oversight and protection of the TikTok platform and user data in the U.S., so millions of Americans can continue turning to TikTok to learn something new, earn a living, express themselves creatively, or be entertained. The teams within USDS that deliver on this commitment daily span Trust & Safety, Security & Privacy, Engineering, User & Product Ops, Corporate Functions and more.
As a direct report to the Head of Offensive Security and Privacy Operations (OSO), you will be responsible for overseeing the project and program management of OSO. USDS OSO is responsible for performing security testing for the USDS organization and houses various teams and initiatives like Red Team, Purple Team, Penetration Testing, Controls Validation, Privacy Testing etc. The team is comprised of information security practitioners that are highly technical individuals and seasoned testers that work to protect the trust in TikTok and US user data.
We are looking for a fexible, innovative, and results oriented Technical Project Manager (TPM) to drive projects forward. In this role, you will work with technical and non-technical cross-functional teams across various regions to interpret, communicate, and drive full lifecycle security projects and programs. You will assist in tracking and building various initiatives, drive and remove blockers for product and infrastructure security projects, identify and implement process improvements, and work with security and engineering teams to develop innovative solutions to complex technical problems. If you enjoy working in a rapidly changing environment and influencing the strategic direction of a large global organization, this position will provide you with a challenging opportunity.
The successful candidate will have demonstrated problem solving skills, strong business judgment, and experience working with multiple teams delivering large programs and services. Has proven track record of delivering results by executing both strategically and tactically, technical background, a passion for security and privacy of our users.
In order to enhance collaboration and cross-functional partnerships, among other things, at this time, our organization follows a hybrid work schedule that requires employees to work in the office 3 days a week, or as directed by their manager/department. We regularly review our hybrid work model, and the specific requirements may change at any time.
Responsibilities:
Project Management

• Run project management for all tasks and teams to ensure timely delivery of projects and adherence to governance structure
• Define goals and objectives, implement structure, gain clarity for unstructured problems, and drive tasks/projects to completion
• Anticipate bottlenecks, remove blockers, handle escalations with a risk and data driven approach. Be comfortable making decisions and assessing trade-offs to balance business needs against technical constraints
• Co-ordinate weekly status update calls with various teams to gather timely and succinct updates
• Compile weekly and monthly status reports for leadership consumption
• Communicate effectively at multiple levels, translate technical jargon for leadership consumption, build trust across the organization, and demonstrate discretion while executing sensitive projects

Qualifications
Responsibilities (continued):

• Collect inputs from business, security, engineering teams, and other stakeholders to build project plans and roadmap to deliver desired security outcomes
• Break large and complex problems into manageable workload, effectively prioritize, and deliver projects in a successful and timely manner
• Oversee project governance and change management
• Coordinate projects across multiple teams, driving them to successful conclusions while building strong, lasting relationships with internal and external stakeholders.

Program Management

• Be aware of all ongoing work efforts in OSO to be an effective conduit and proxy for OSO lead
• Manage external relationships with vendors and third-parties that support testing efforts
• Create and maintain security documentation like Standard Operating Procedures, testing methodologies and framework, Rules of Engagement, Reporting template etc.
• Support mentoring, team building, and recruiting activities
• Utilize technical acumen to assist OSO leads for scoping and delivering new, reoccurring, and ad-hoc security testing projects and tasks. This can include information gathering from stakeholders, driving end-to-end project schedules, reducing risks and blockers, providing regular status updates
• Collaborate with procurement team to help them prioritize tools, technology, products and services needed for OSO. Have visibility into the process to anticipate delays, purchase requests and payments.
• Assist OSO lead in maintaining yearly budget and burn rate for OSO
• Assist with RFP process: gathering requirements, surveying emerging security products and technologies, conducting demos, comparing vendors, co-ordinating setup of infrastructure and pre-requirements, deploying tools and technology, collaborating with vendors and leads to onboard contractors
• Assist in creating presentations for technical and non-technical leadership audiences around activities, accomplishments and risks for OSO
• Gather operational data and metrics to refine and finetune processes, improve delivery timelines, identify areas of improvement and drive maturity
• Assist in developing quarterly OKRs and track it to completion

Qualifications

• Well versed in agile practices like scrum project management framework
• Performed technical offensive security testing in a professional context in the past
• Information security and management certification i.e. CISSP
• Excellent fundamental knowledge of industry standard frameworks like OWASP, MITRE ATT&CK, CWE
• Excellent verbal and written communication skills and the ability to influence outcomes without authority. Ability to communicate technical concepts to a broad range of technical and non-technical staff
• Strong attention to detail, ability to prioritize and balance tasks/risks in ambiguous and complex situations
• Demonstrated teamwork and collaboration skills with cross-functional local and global teams
• Highly motivated to contribute, flexible when faced with changing requirements, patient with delays and empathetics towards others
• Demonstrates efficiency in setting organizational direction, time management, problem-solving skills, prioritization of tasks and goal setting for team members
• Strong analytical/problem solving skills and cross functional knowledge across multiple operational and security disciplines
• Possess a high degree of integrity, be trustworthy, and have the ability to lead and inspire change - Experience building and growing a team to meet strategic and tactical objectives; mentoring and coaching staff

D&I Statement
TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.
Accommodation Statement
TikTok is committed to providing reasonable accommodations in our recruitment processes for candidates with disabilities, pregnancy, sincerely held religious beliefs or other reasons protected by applicable laws. If you need assistance or a reasonable accommodation, please reach out to us at usds.accommodations@tiktokusds.com