TikTok
Senior Security Compliance Analyst - Global Security Organization
San Jose, California · Senior · Full-time · Posted Oct 28, 2026
- Experience
- Preferred: 5+ years in IT audit, SOX/GITC controls, IT compliance, or information security assurance roles within a regulated industry.
- Education
- Preferred: Bachelor's degree in Law, Computer Science, Information Security, Business Administration, or a closely related field.
About the job
Supports TikTok’s IT compliance program by assessing, testing, and improving General IT Controls and helping prepare for internal and external audits.
What you'll do
- Support system scoping, control assessments, evidence gathering, testing, and audit demonstrations across Access Management, Change Management, and System Monitoring.
- Track control-gap remediation, validate and retest fixes, and help improve control automation and consistency.
- Coordinate audit requests, walkthroughs, and follow-ups with internal stakeholders and external auditors.
What they ask for
- Working knowledge of General IT Controls across Access Management, Change Management, and System Monitoring.
- Ability to understand technical architectures and read code repository, CI/CD pipeline, and monitoring configurations; understanding of data-flow analysis.
- Experience with system discovery, process-flow mapping, control documentation, and audit-population extraction.
- Experience developing, implementing, and managing compliance programs at scale, including direct engagement with regulators, external auditors, or supervisory bodies.
Nice to have
- Familiarity with EU regulatory frameworks such as DSA, GDPR, or the Online Safety Act.
- Python, SQL, and data-analysis proficiency; relevant certifications include CISA, CISM, CRISC, CISSP, or CIPP/E.
Tools
Python, SQL, CI/CD
Model-written summary · the original posting is authoritative