TikTok
Technology Internal Audit Lead
San Jose, California · Full-time · Posted Oct 28, 2026
- Experience
- 5+ years of relevant experience; the posting lists Technology Audits, Product Security, Security Engineering or Security Compliance as areas of experience.
About the job
Leads technology audits and risk reviews, including assessments of AI/ML systems, security, infrastructure, and privacy, and recommends controls and improvements.
What you'll do
- Plan and execute technology audits and complex control assessments, including for LLM-powered products and AI/ML systems.
- Use data analytics to identify risks and review AI/ML controls such as data quality, privacy, safety testing, and output monitoring.
- Develop risk-based recommendations, advise product and engineering teams, and ensure audit quality and consistency.
What they ask for
- 5+ years of relevant experience in Technology Audits, Product Security, Security Engineering or Security Compliance; experience in the technology sector and/or consulting is preferred.
- Strong understanding of security fundamentals across cyber domains, including IAM, data security, application security, and network security.
- Ability to assess complex technology environments against risk outcomes, best practices, internal standards, and regulatory requirements.
- Strong problem-solving, critical thinking, collaboration, and communication skills, including the ability to provide technical challenge.
Nice to have
- Understanding of LLMs, ML pipelines, model lifecycle management, and data engineering architectures; experience with tools or platforms such as PyTorch, TensorFlow, HuggingFace, GitHub, Bitbucket, AWS, Azure, or GCP.
- Experience in a global or rapidly scaling technology environment; relevant professional certifications such as CISSP, CISM, GIAC, CCNA, CISA, CRISC, or CIA.
Tools
LLMs, ML, PyTorch, TensorFlow, HuggingFace, GitHub, Bitbucket, AWS
AI focus
Audits and risk reviews of AI/ML systems, including architecture, data flows, model training and serving, safety testing, evaluation metrics, red-teaming, hallucination mitigation, and output monitoring.
Model-written summary · the original posting is authoritative