Global Security Training & Policy Communications Lead

Responsibilities

TikTok is the leading destination for short-form mobile video. At TikTok, our mission is to inspire creativity and bring joy. TikTok's global headquarters are in Los Angeles and Singapore, and its offices include New York, London, Dublin, Paris, Berlin, Dubai, Jakarta, Seoul, and Tokyo.

Why Join Us
Creation is the core of TikTok's purpose. Our platform is built to help imaginations thrive. This is doubly true of the teams that make TikTok possible.
Together, we inspire creativity and bring joy - a mission we all believe in and aim towards achieving every day.
To us, every challenge, no matter how difficult, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.
At TikTok, we create together and grow together. That's how we drive impact - for ourselves, our company, and the communities we serve.
Join us.

As a member of TikTok's Global Security Organization (GSO), reporting to the Global Head of Security Advocacy & Culture, you will play a critical role in continuing to advance TikTok's global security posture and culture of compliance. The Global Security Training & Policy Communications Lead is a senior role responsible for driving the design, development, implementation, reporting, and enhancement of comprehensive internal security training and policy education. This position ensures that all employees, contractors, and third-party vendors understand and adhere to the company's global security and compliance policies. The ideal candidate will possess deep expertise in compliance-driven training, policy communications, and change management, with a proven track record of leading enterprise-wide initiatives in a global environment.

Responsibilities:

Strategic Program Development
- Global Strategy Implementation: Develop and manage a global strategy for security education, training, and policy communications aligned with security policies, risk frameworks, and compliance (ISO 27001, SOC2, PCI DSS).
- Vendor & Consultant Management: Oversee relationships with internal teams, vendors, and consultants to ensure seamless delivery of security tools and training that meet organizational standards.
- Needs Assessment & Reporting: Conduct regular security training assessments, track progress, and report effectiveness to senior management using KPIs and metrics.
- Risk-Based Training: Implement training based on risk assessments and compliance reviews to maintain alignment with global standards.
- Custom Programs: Design and improve compliance-driven training tailored to regions, departments, and roles, including e-learning, workshops, and webinars.
- Budget Management: Manage the security training budget to ensure cost-effective execution and resource allocation.

Security Policy Communications
- Communication Strategy: Lead the strategy for communicating security and compliance policies across the enterprise.
- Cross-Functional Collaboration: Partner with Global Security, Legal, Compliance, HR, IT, and Communications to help ensure clear understanding of policy updates globally, including localization.
- Tailored Messaging: Ensure communications are accessible and customized for diverse audiences.

Security Training Management
- Training Delivery: Ensure engaging, effective training content aligned with industry-standard principles, such as adult learning techniques.
- Continuous Improvement: Evaluate and improve training based on feedback, assessments, and compliance metrics.
- Regulatory Compliance: Ensure training programs meet legal and regulatory standards and are updated regularly.

Security Compliance & Risk Management
- Compliance Monitoring: Track adherence to global security policies, identify gaps, and recommend corrective actions.
- Culture Enhancement: Strengthen compliance culture through targeted training and communication.
- Subject Matter Expertise: Provide global expertise in security and compliance training, offering guidance to regional teams.

Leadership & Collaboration
- Team Leadership: Manage workflows within a Center of Excellence team, offering mentorship and performance management.
- Global Implementation: Collaborate with regional compliance officers and business leaders to ensure effective implementation of global training and policy strategies.
- Audit Liaison: Serve as the primary contact for external auditors and regulatory bodies regarding security training and communications.
- Cross-Collaboration: Work closely with Legal, Ethics, Communications, Privacy, and other teams to unify training programs and standardize processes for employees.

Qualifications

Minimum Qualifications
- Deep understanding of global compliance frameworks such as ISO 27001, NIST, and other relevant security standards.
- Prove