Senior Data Loss Prevention Specialist - USDS

About the Team

The DLP team is a part of the larger USDS Data Identity & Access Management (DIAM) team and is responsible for developing, operating, and maturing a program aimed at identifying and preventing the misuse and loss of sensitive data. Data channels in scope for DLP data in motion rules include workstation endpoints (laptops), web, email, printing, and sanctioned and unsanctioned SaaS.



In order to enhance collaboration and cross-functional partnerships, among other things, at this time, our organization follows a hybrid work schedule that requires employees to work in the office 3 days a week, or as directed by their manager/department. We regularly review our hybrid work model, and the specific requirements may change at any time.



About the Role

As a Senior Data Loss Prevention (DLP) Specialist, you will play a critical role in delivering TikTok’s DLP program objectives by implementing, managing, and optimizing TikTok's DLP technology stack. Reporting directly to the lead of US Data Identity and Access Management, you will collaborate across cybersecurity, privacy, engineering, and data protection teams to safeguard sensitive data in compliance with geographical regulations, contractual commitments, and confidentiality requirements.



This role requires expertise in enterprise DLP technology deployments, a deep understanding of DLP strategies and capabilities, and the ability to respond swiftly and accurately to DLP alerts. You will also act as a key communicator, translating technical insights into actionable business value for stakeholders.



Responsibilities:

- Assist in supporting Data Loss Prevention (DLP) technology solutions to protect TikTok data across servers, endpoints, and cloud environments

- Create and maintain technical architecture diagrams to support DLP landscape

- Scripting and data analysis for alerting fidelity and use case development

- Configure and deploy infrastructure as needed to meet DLP program goals

- Interface with Operations and Engineering colleagues to ensure proper maintenance of DLP infrastructure (baseline hardening, system patching, back-ups, etc.)

- Design and configure DLP endpoint agent software packages

- Establish relationships with key stakeholders across multiple business units to develop, deploy, and operate effective DLP solutions

- Assist in the integration of DLP technology with SIEM, UBA, Insider Risk tools, or other relevant technologies

- Investigate and improve detection technologies focused on theft or loss of consumer data, employee data, business sensitive data, and/or intellectual property

- Support any DLP-related audit or controls testing processes