Data Protection and Sovereignty Technical Program Manager, Global Security

TikTok; London; On-site; GBP 50,000 - 100,000

Job description

This job is brought to you by Jobs/Redefined, the UK's leading over-50s age inclusive jobs board.

Responsibilities

TikTok is seeking a highly adaptable and motivated Program Manager for our Data Protection and Sovereignty team spanning numerous cybersecurity disciplines. You will play a crucial role in ensuring the privacy and security of our regional data by collaborating with third-party security providers, while leveraging the efficiencies offered by our internal security functions.

You will collaborate closely with various teams, including Security, Privacy, and Engineering, to help ensure the operational sustainability of our data security measures. You will also engage regularly with third-party security providers to demonstrate transparency and achieve external assurance. This role reports to the Data Sovereignty Lead within GSO's Data Protection team.

Key Responsibilities
- Provide technical strategy and management for Data Sovereignty programs regionally, which include cross-functional security projects across multiple organizations and external providers, to implement programs that meet the organization's Information Security standards, the assurance objectives of third parties, and regional regulatory requirements.
- Deliver operational security services and solutions which include but are not limited to: Program Management, Vendor Management, Secure Code Review, Security Monitoring, Network Monitoring, Vulnerability Management, Incident Response, and other traditional security disciplines.
- Create executive leadership communications (provide appropriate updates/recommendations regarding organization's regional security posture) and reporting (prepare and present high-level security reports that clearly and effectively communicate the organization's regional security status, significant risks/issues, and external implications of security metrics).
- Manage stakeholders and work streams across disciplines and diverse regions/work cultures (present complex security concepts and situations to both technical and non-technical stakeholders in a clear and comprehensible manner).
- Lead project planning (create and maintain project plans and roadmaps in accordance with internal and external priorities, define delivery methodologies and drive project execution) and tracking (manage various collaboration tools and dashboards to ensure accurate and timely status updates on project execution).
- Assemble and enable integrated teams with the appropriate skills for successful execution and delivery (including subject matter experts, project sponsors, and operational resources across multiple internal and external teams).

Qualifications

Minimum Qualifications
- Experience driving technical cybersecurity programs from scoping to delivery at scale.
- Strong understanding of cybersecurity managed services, secure code review and vulnerability management, access management, network monitoring, incident response and compliance frameworks (e.g., NIST, ISO, PCI).
- Strong analytical, organizational, and interpersonal skills, combined with excellent verbal and written communication skills.
- Significant experience engaging with third-parties or external stakeholders, such as client-facing support or management of contractor relationships.
- Experience operating autonomously and leading across multiple teams, with stakeholders in different disciplines across time zones.

Preferred Qualifications
- Bachelors' Degree or industry equivalent work experience.
- 5 years experience working in cybersecurity or privacy program management.
- Relevant certifications: CISSP, CISM, PMP.
- Understanding of privacy risk, data protection, or a related field, with a proven track record of executing privacy programs.
- Understanding of global data protection laws and regulations, including GDPR, CCPA, and industry-specific regulations.
- Ability to work collaboratively in a team environment and to engage with stakeholders at all levels of the organization.
- Demonstrated ability to work effectively in environments of ambiguity and constant change.

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace.