Senior Privacy Counsel - USDS

Responsibilities

About TikTok U.S. Data Security
TikTok is the leading destination for short-form mobile video. Our mission is to inspire creativity and bring joy. U.S. Data Security (“USDS”) is a subsidiary of TikTok in the U.S. This new, security-first division was created to bring heightened focus and governance to our data protection policies and content assurance protocols to keep U.S. users safe. Our focus is on providing oversight and protection of the TikTok platform and U.S. user data, so millions of Americans can continue turning to TikTok to learn something new, earn a living, express themselves creatively, or be entertained. The teams within USDS that deliver on this commitment daily span across Trust & Safety, Security & Privacy, Engineering, User & Product Ops, Corporate Functions and more.

Why Join Us
Creation is the core of TikTok's purpose. Our platform is built to help imaginations thrive. This is doubly true of the teams that make TikTok possible.
Together, we inspire creativity and bring joy - a mission we all believe in and aim towards achieving every day.
To us, every challenge, no matter how difficult, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.
At TikTok, we create together and grow together. That's how we drive impact - for ourselves, our company, and the communities we serve.
Join us.

Team Intro
The USDS Legal team handles and oversees legal privacy and regulatory matters pertaining to TikTok USDS's operations. The team works cross-functionally with multiple stakeholders in the US and around the world to tackle some of the most complex, interesting, and cutting edge issues in privacy and security. We are looking for a highly motivated, experienced, and bright legal professional to join our exciting team.

In order to enhance collaboration and cross-functional partnerships, among other things, at this time, our organization follows a hybrid work schedule that requires employees to work in the office 3 days a week, or as directed by their manager/department. We regularly review our hybrid work model, and the specific requirements may change at any time.

Responsibilities:
- Collaborate with Global Privacy to implement and maintain USDS's compliance with global privacy laws, including GDPR and CCPA.
- Refine and execute external and internal privacy policies, processes, and guidelines, with a focus on practical implementation.
- Play a crucial role in our cybersecurity incident management program, assisting with investigation, notification, and remediation efforts.
- Provide expert legal advice on data protection to internal stakeholders, ensuring product teams, engineering, and management are well-informed on privacy matters.
- Support the development and implementation of privacy training programs to promote a culture of compliance across TikTok.
- Review and negotiate privacy provisions in contracts and agreements, safeguarding user data.
- Act as a key interface with regulatory authorities and industry groups on privacy matters, focusing on operational compliance.
- Work closely with legal, security, compliance, and public policy teams to navigate privacy challenges and seize opportunities.
- Mentor and coach team members, particularly focusing on developing their expertise in privacy law and practices.

Qualifications

Minimum Qualifications:
- J.D. degree from an ABA-accredited law school (or foreign equivalent)
- Active membership in good standing in a US state bar
- 5+ years of legal experience, with at least 3 years focused on privacy law in the tech or social media sectors
- Comprehensive understanding of key global privacy laws, including GDPR and CCPA
- Demonstrated experience in implementing privacy compliance programs
- Strong analytical and problem-solving skills
- Excellent written and verbal communication abilities

Preferred Qualification
- 5+ years of legal experience, with 3+ years dedicated to privacy law in the tech or social media sectors
- Proven track record in executing privacy compliance initiatives within established frameworks
- Experience in incident response and data breach management
- Familiarity with cybersecurity principles and their intersection with privacy law
- Demonstrated ability to collaborate effectively across multiple teams and stakeholders
- Experience in providing practical, business-oriented privacy advice in a fast-paced environment
- Adaptability and flexibility in approach, with a willingness to take on evolving responsibilities
- Strong project management skills, including the ability to prioritize and manage multiple tasks efficiently
- Experience in contract review and negotiation, particularly regarding privacy provisions
- Knowledge of emerging privacy trends an