Technical Program Manager - USDS

In order to enhance collaboration and cross-functional partnerships, among other things, at this time, our organization follows a hybrid work schedule that requires employees to work in the office 3 days a week, or as directed by their manager/department. We regularly review our hybrid work model, and the specific requirements may change at any time.

We seek a highly motivated, experienced, and dynamic professional to join our team. This is an opportunity to work on the most innovative platform in the industry, strengthening security and privacy, in our mission to Inspire Creativity and Enrich Lives.

As a direct report to the Head of Privacy and Integrated Security Department, the Technical Program Manager is a program leader at the forefront of ensuring adherence to privacy regulations and building trust in the TikTok US platform. You will play a pivotal role in overseeing and supporting the USDS privacy program under the broad security, privacy and compliance context.

You will collaborate with global and US cross-functional teams to lead and facilitate privacy program objectives, and measure the impact of our strategic decisions and operational executions on the privacy posture of the TikTok US platform.

Responsibilities:
- Lead and support the development, execution, and measurement of the comprehensive privacy program aligned with TikTok global and USDS objectives.
- Manage and track objectives and key results (OKR) using OKR framework methodology, and collaborate with cross-functional teams to deliver projects on time and within budget.
- Collaborate on all workstream activities, including privacy compliance, risk management, and data protection etc.. Facilitate stakeholder engagements. Foster partnership with cross-functional teams and drive constructive communications.
- Drive projects from initiation to delivery. Identify and mitigate risks. Develop mitigation plans and continuously improve project delivery processes. Provide regular status reports and updates to senior leadership.
- Collaborate with internal and external stakeholders to drive program success, including external regulators, 3rd party auditors, 3rd party providers, TikTok global legal, R&D, Privacy and Data Protection Offices, Security organizations, USDS cyber security, threat detection, and risk & compliance teams.
- Identify areas for automation to increase efficiency of repeated tasks, such as regular status reporting, and track staffing, contracting, and procurement. Assess tooling needs, evaluate solutions, drive to adopt internal toolings, develop custom solutions or acquire 3rd party products.
- Lead effort in organizing and managing workshops that facilitate cross-functional collaborations, knowledge sharing, strategic and goal planning, and building program visibility.
- As a new program, team members may be assigned special projects or additional responsibilities to support the program's growth and objectives. These tasks will be aligned with the employee's skill set, growth potential, and experience and may vary based on the evolving business needs.

Qualifications

Minimum Qualifications
- Bachelor's degree with 5+ years of experience in consulting, program management, compliance/risk management, or other related disciplines. Candidates with significant relevant experience in security, privacy and data protection fields will also be considered in lieu of a formal degree.
- Must be adaptable and able to navigate through ambiguity and vagueness within a large complex organization.
- Proven experience in enterprise setting with excellent understanding of business operations, program governance, stakeholder relationships, and cross-functional processes. Demonstrated success collaborating with cross-functional teams and driving project or program initiatives for a large and global organization.
- Expertise in managing multiple dependencies, measuring performance against established objectives and KPIs, and making informed trade-off decisions. Experience creating and disseminating reports to multi-level audiences in a technical environment.
- Strong stakeholder management and communication skills (verbal and written), with the ability to summarize complex requirements effectively.
- Must be adaptable and able to navigate through ambiguity and vagueness within a large complex organization.

Preferred Qualifications
- Project or program management experience in a global distributed software product development, information security or GRC setting
- One or more of the following certifications: CISSP, CISM, PMP, CIPP, CIPM, CIPT, CRISC
- Strong technical background, e.g., in product management, cyber security, information security, GRC.
- Knowledge of one or more industry security and privacy standards and frameworks (e.g., NIST, ISO, IAPP, ISC2, ISACA)
- Knowledge of privacy regulations (e.g., GDPR, COPPA, CCPA, etc.)