Description:

Responsibilities:
About the Team:
Our Legal and Compliance team provides key support for all TikTok USDS Joint Venture's innovative initiatives, state-of-the-art products, and integrated platforms. We help our technological and business teams enable their vision by providing integrated legal and compliance guidance and support.

Responsibilities:

Regulatory Compliance & Strategy: Coordinate, monitor, and advise on changing US privacy laws and regulations with a focus on state-level privacy laws and AI governance rules. Assist with Privacy Impact Assessments (PIAs) and collaborate with security and product teams to embed Privacy by Design into JV roadmaps. Coordinate and oversee policies regarding data retention, data mapping, and subject access requests)
Incident Response & Cybersecurity: Serve as the legal lead on the Enterprise Incident Response team, directing privilege, risk assessments, and containment actions during data breaches or security incidents. Independently manage and coordinate necessary regulatory notifications and law enforcement outreach. Partner closely with Security Officer and security apparatus.
Commercial Transactions & Vendor Risk: Draft, review, and negotiate Data Processing Agreements and assist with complex tech vendor contracts. Advise corporate teams on privacy and cybersecurity due diligence. Support Third Party Risk Management processes as necessary.
Regulatory Engagement & Disputes: Represent the company before data protection authorities and state/federal regulatory bodies as needed. Coordinate with outside counsel on privacy or cybersecurity litigation and enforcement defense.

Qualifications:
Minimum Qualifications:

J.D. Degree from an ABA-accredited law school and active membership in good standing with a U.S. state bar.
CIPP/US, CIPP/E, CIPM, or CIPT certifications from the IAPP preferred.
15+ years of law practice, including experience at a fast-paced technology platform company, focused on data protection, privacy, and cybersecurity.
Hands-on experience with US federal/state privacy legislation, international transfer frameworks, and cybersecurity standards (e.g., NIST, ISO 27001).
Ability to work independently and collaboratively with cross-functional and global teams across various time zones and building processes from scratch.
Excellent analytical, writing and communications skills.
Ability to manage complex incident responses and prioritize and manage competing demands and long-term projects.

Job Information:
【For Pay Transparency】 Compensation Description (Annually) - Washington, DC
The base salary range for this position in the selected city is $ 205920 - $ 377280 annually.

Compensation may vary outside of this range depending on a number of factors, including a candidate's qualifications, skills, competencies and experience, and location. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work, and this role may be eligible for additional discretionary bonuses/incentives, and restricted stock units.

Benefits may vary depending on the nature of employment and the country work location. Employees have day one access to medical, dental, and vision insurance, a 401(k) savings plan with company match, paid parental leave, short-term and long-term disability coverage, life insurance, wellbeing benefits, among others. Employees also receive 10 paid holidays per year, 10 paid sick days per year and 17 days of Paid Personal Time (prorated upon hire with increasing accruals by tenure).

The Company reserves the right to modify or change these benefits programs at any time, with or without notice.