Data Protection & Privacy Operation Specialist - USDS

We seek a highly motivated, experienced, and dynamic professional to join our team. This is an opportunity to work on the most innovative platform in the industry, strengthening security and privacy, in our mission to Inspire Creativity and Enrich Lives. The Privacy and Data Compliance Specialist plays an important role in advancing our privacy practices at USDS, through aligning USDS privacy practice with the global privacy compliance framework (PCF), working closely with global legal, R&D, Privacy and Data Protection Offices (PDPO) as well as USDS privacy operation teams. The ideal candidate will have a strong background in privacy compliance assessment, a deep understanding of privacy control mechanisms at the technical layers, and a passion for privacy considerations from an end-user perspective. Initially reporting to the Head of Privacy and Integrated Security, the reporting structure may evolve as the capability grows.

Reporting to: Data Protection and Privacy Strategist within the Department of Privacy and Integrated Security. The reporting structure may evolve as the program capability grows.

Responsibilities
- Privacy Program Execution: Support the operationalization of privacy principles and data handling requirements within TikTok USDS.
- Data Deletion & Lifecycle Management: Coordinate with engineering and data governance teams to ensure timely and secure deletion of U.S. user data when no longer needed.
- Privacy by Design: Collaborate with product, engineering, and security teams to integrate privacy requirements into TikTok's infrastructure, data flows, and features.
- Process Optimization & Automation: Support automation initiatives to streamline data governance workflows, reduce manual efforts, and improve privacy controls.
- Documentation & Policy Enforcement: Maintain and update privacy guidelines, operational procedures, and governance frameworks for TikTok USDS.
- Training & Awareness: Help develop and deliver privacy education materials to increase internal awareness of data handling requirements.
- Metrics & Reporting: Assist in tracking privacy-related KPIs, compliance trends, and reporting insights to leadership.
- As a new program, team members may be assigned special projects or additional responsibilities to support the program's growth and objectives. These tasks will be aligned with the employee's skill set, growth potential, and experience and may vary based on the evolving business needs.

Qualifications

Minimum Qualifications
- Bachelor's degree in information systems, data science, computer science, information management, or a related field.
- 4+ years of experience in privacy operations, product management, data management or a related technical/operational role.
- Excellent fundamental knowledge of industry standards frameworks (NIST Privacy Framework, ISO 27001, ISO/IEC 27701, NIST RMF, ISO 31000, IAPP guidelines, etc.)
- Detail-oriented with strong organizational and documentation skills along with Understanding of privacy principles such as data minimization, retention, deletion, and discovery.
- Experience working with structured and unstructured data, including data inventory, mapping, and classification. Must be adaptable and able to navigate through ambiguity and vagueness within a large complex organization.

Preferred Qualifications
- Experience working with privacy-enhancing technologies, data governance tools, or automation solutions.
- Familiarity with cloud environments (e.g., AWS, GCP), databases, and data security best practices.
- Hands-on experience implementing data lifecycle management policies.
- Basic knowledge of U.S. data security laws and regulatory requirements (e.g., CPRA, FTC guidelines, U.S. government security frameworks).
- Relevant certifications (e.g., CIPT, CIPP/US, CDPSE, or data governance credentials) are a plus.

Job Information

[For Pay Transparency] Compensation Description (annually)

The base salary range for this position in the selected city is $93860 - $168200 annually.

Compensation may vary outside of this range depending on a number of factors, including a candidate's qualifications, skills, competencies and experience, and location. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work, and this role may be eligible for additional discretionary bonuses/incentives, and restricted stock units.

Benefits may vary depending on the nature of employment and the country work location. Employees have day one access to medical, dental, and vision insurance, a 401(k) savings plan with company match, paid parental leave, short-term and long-term disability coverage, life insurance, wellbeing benefits, among others. Employees also receive 10 paid holidays per year, 10 paid sick days per year and 17 days of Paid Personal Time (prorated upon hire with increasing accruals by tenure).

The Company reserves the right to modify or change these benefits programs at any time, with or without notice.

For Los Angeles County (unincorporated) Candidates:

Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state, and local laws including the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Our company believes that criminal history may have a direct, adverse and negative relationship on the following job duties, potentially resulting in the withdrawal of the conditional offer of employment:

1. Interacting and occasionally having unsupervised contact with internal/external clients and/or colleagues;

2. Appropriately handling and managing confidential information including proprietary and trade secret information and access to information technology systems; and

3. Exercising sound judgment.