Product Security Partnership Manager - Global Security Organization

The mission of TikTok's Global Security Organization is to build and earn trust by reducing risk and securing our businesses and products. Also known as "GSO", this team is the foundation of our efforts to keep TikTok safe, secure, and operating at scale for over 1 billion people around the world. We work to ensure that the TikTok platform is safe and secure, that our users' experience and their data remains safe from external or internal threats, and that we comply with global regulations wherever TikTok operates.



Trust is one of TikTok's biggest initiatives, and security is integral to our success. In whatever ways users interact with us — whether they're watching videos on their For You page, interacting with a Live video, or buying products on TikTok Shop — GSO protects their data and privacy, so they can have a secure and trustworthy experience.



We are seeking a Product Security Partnership Manager to join our Global Security Organization. As part of the Program Management Office, you'll drive the end-to-end delivery of security assessments that enable the operational efficiency of TikTok's Global Security Organization.



Responsibilities

- Serve as the primary owner for all Data Processing Agreement (DPA) requirements for vendors under FTC orders, ensuring full compliance with regulatory mandates

- Process and manage security assessments from vendors with specific focus on DPA compliance requirements

- Coordinate with legal teams to ensure DPAs are properly executed and maintained according to FTC order requirements

- Support the end-to-end vendor security assessment process, including intake, assessment, review, and completion stages

- Log Third Party profiles and information in the repository, completing new assessment records and linking intake records with completed security questionnaires

- Own and manage all relationships with product owners to ensure successful completion of DPAs and consequent RFIs

- Serve as the primary point of contact for product teams regarding vendor security requirements and DPA compliance

- Facilitate communication between product owners, legal, and security teams to ensure alignment on security requirements

- Provide expert guidance to product owners on DPA requirements and vendor security assessment processes

- Develop and maintain standardized processes for DPA management and vendor security assessments

- Create and update documentation, templates, and communication materials for vendor security requirements

- Identify opportunities for process optimization and automation within the vendor assessment workflow

- Ensure accurate record-keeping and reporting on vendor security assessment status and compliance