Governance, Risk, & Compliance Services Lead - USDS

TikTok is seeking a Governance, Risk, & Compliance ("GRC") Services Lead to be part of the US Security & Privacy Risk and Compliance team. This role will have a significant impact on mitigating regulatory compliance risk, and maturing GRC operations. The primary focus of this role will be to strategically mature three Risk & Compliance services: 1) Controls & Certifications 2) Policy Management 3) Third-Party Risk Management. The GRC Services Lead must have a "business first" mindset, working to achieve levels of maturity and efficiency, without sacrificing compliance.



On-site presence across teams allows the company to operate with greater speed, alignment, and agility — especially in areas like real-time decision-making, team development, and integrated execution. As such, the company is shifting from a hybrid work model to a fully in-person schedule up to 5 days a week.



Responsibilities include but are not limited to:

- Partner with Controls & Certifications, Policy Management, and Third-Party Risk Management ("TPRM") team leads to oversee day-to-day operations

- Quickly understand current ways of working to identify maturity and efficiency gaps for each service

- Develop strategic plans and underlying OKRs to achieve these initiatives

- Challenge status-quo of manual operations and work to implement technology driven solutions to achieve greater coverage (i.e., control testing) and lower manual efforts (i.e., policy development, TPRM assessments)

- Partner across the Security & Privacy organization and business teams to proactively align GRC operations to changing business priorities and objectives; work closely with business teams to develop ongoing compliance testing strategies

- Develop metrics and reporting to communicate business initiatives and risks to the broader security and compliance organization

- Collaborate with compliance assurance and compliance reporting functions to support regulatory reporting initiatives