Responsibilities
About the Team
PDPO (Privacy and Data Protection Office) is the organization to lead, supervise, and empower all TikTok's privacy work in an accountable and industry leading way. You will join a global team driving privacy best practices across TikTok. Our focus involves ensuring compliance with global laws, regulations and the adoption of privacy best practices. In this role, you will drive multiple programs, in collaboration with colleagues around the world. You will partner with legal and technical teams to drive change across the organization.
We are looking for talented individuals to join our PDPO team for an internship in 2025 to be based in San Jose. You will be involved in the critical process of ensuring that privacy commitments are validated, meaning we confirm that there is evidence and documentation to support what we promise to our users. Internships at TikTok aim to offer students industry exposure and hands-on experience. You will interact with Product/Engineering, Legal, Business, and will play a critical role in upholding the privacy rights of our users, ensuring the protection of their personal information, ensuring compliance with global privacy laws, and promoting the adoption of best practices. If you are passionate about privacy, data protection, and possess the expertise to assess and enhance our privacy practices, we invite you to join our team and contribute to our mission of maintaining the highest standard of data privacy and security.
Want more jobs like this?
Get Administration and Office jobs in San Jose, CA delivered to your inbox every week.
Internships at TikTok aim to provide students with hands-on experience in developing fundamental skills and exploring potential career paths. A vibrant blend of social events and enriching development workshops will be available for you to explore. Here, you will utilize your knowledge in real-world scenarios while laying a strong foundation for personal and professional growth.
Applications will be reviewed on a rolling basis - we encourage you to apply early.
Successful candidates must be able to commit to at least 12-week long internship period.
Responsibilities:
- Partner with departments and stakeholders to actively communicate and embed privacy commitments and practices throughout the organization.
- Develop technical product requirements from privacy policies and guidance to guarantee organizational adherence to privacy commitments, laws, and regulations.
- Conduct internal assessments to support risk identification, evaluation, governance, and improvement of privacy requirements.
- Partner with Legal to raise awareness and implement privacy requirements across product, engineering, and business teams to mitigate complex risks.
- Support the design and proof of concept building of dashboards, and utilities to support commitment team.
- Communicate with technical and non-technical stakeholders on privacy risk findings and program-specific reporting.
Qualifications
Minimum Qualifications
- Currently pursuing a Bachelor's or Master's in Computer Science, Engineering, Cybersecurity, Information Systems, or related field.
- Able to commit to working for 12 weeks during Summer 2025.
- Knowledge of a coding language such as C*, Go, or similar.
- Basic Data analysis, profiling skills, SQL, and Python knowledge.
- Understand quality assurance lifecycle from test planning, tast implementation , regression testing etc
- Basic understanding of system architecture, privacy risks, principles and concepts.
- Highly detail-oriented, with the ability to identify application, platform and system level risks.
- Self-motivated with the ability to manage multiple tasks simultaneously and prioritize appropriately.
Preferred Qualifications:
- Prior experience in privacy, compliance, cybersecurity, auditing, consulting, technical program management or industry equivalent work experience.
- Prior work on anonymization/pseudonymization/encryption technologies to protect user privacy in data processing activities.
- Knowledge of privacy laws, regulations and industry best practices, including GDPR, the California Consumer Privacy Act, and HIPAA.
- Understand the design ideas of distributed system architecture, including but not limited to service-oriented, asynchronous, highly available, scalable, etc;
- Eagerness to learn and adapt to new technologies and privacy practices.
- Candidates must be currently enrolled in a degree program and expecting to graduate in December 2025 or later.