TikTok
Technology Internal Audit Lead
Los Angeles, California · Full-time · Posted Oct 28, 2026
- Experience
- 5+ years of relevant experience; technology-sector or consulting experience is preferred.
About the job
Leads technology audits and risk reviews across TikTok and other products, assessing technology controls and AI/ML systems and advising teams on risk remediation and control improvements.
What you'll do
- Plan and execute technology audits and complex control assessments, including for AI/ML systems, information security, infrastructure, and privacy.
- Use data analytics to assess risks and review AI/ML controls, including data quality, access, safety testing, evaluation, and output monitoring.
- Develop risk-based recommendations, advise engineering and product teams, and ensure audit quality and consistency.
What they ask for
- 5+ years of relevant experience in technology audits, product security, security engineering, or security compliance; technology-sector or consulting experience preferred.
- Strong understanding of security fundamentals across cyber domains, such as IAM, cryptography, data security, application security, and network security.
- Ability to assess complex technology environments against risk outcomes, best practices, standards, and regulatory requirements.
- Strong problem-solving, critical-thinking, collaboration, and communication skills, including the ability to provide technical challenge.
Nice to have
- Knowledge of LLMs, ML pipelines, model lifecycle management, or data engineering architectures; experience with tools or platforms such as PyTorch, TensorFlow, HuggingFace, Github, Bitbucket, AWS, Azure, or GCP.
- Relevant professional certifications such as CISSP, CISM, GIAC, CCNA, CISA, CRISC, or CIA.
Tools
LLMs, PyTorch, TensorFlow, HuggingFace, Github, Bitbucket, AWS, Azure
AI focus
Audits AI/ML architectures and controls, including data flows, model training and fine-tuning, serving infrastructure, safety testing, hallucination mitigation, evaluation metrics, red-teaming, and output monitoring.
Model-written summary · the original posting is authoritative