Regulatory Intelligence & Implementation Specialist - Global Security Organization

About the role

The mission of TikTok's Global Security Organization is to build and earn trust by reducing risk and securing our businesses and products. Also known as "GSO", this team is the foundation of our efforts to keep TikTok safe, secure, and operating at scale for over 1 billion people around the world. We work to ensure that the TikTok platform is safe and secure, that our users' experience and their data remains safe from external or internal threats, and that we comply with global regulations wherever TikTok operates. Trust is one of TikTok's biggest initiatives, and security is integral to our success. In whatever ways users interact with us — whether they're watching videos on their For You page, interacting with a Live video, or buying products on TikTok Shop — GSO protects their data and privacy, so they can have a secure and trustworthy experience. The GSO provides industry-leading security and privacy services to company, guided by four principles: trust and transparency, business enablement, risk-informed decision-making, and proactive risk reduction. We strive to build sustainable, world-class security capabilities. The Security Solutions & Delivery (SSD) team turns security requirements into practical, auditable outcomes that help the business move faster and reduce risk. We support business revenue through Customer Assurance, sustain critical third-party integrations through Partner Compliance, translate evolving regulatory requirements into action through Regulatory Intelligence, and directly take ownership of fixing systemic identified risks through Security Remediation. In addition, our Organizational Excellence pillar supports the broader Global Security Organization with the finance, coordination, and operational foundations it needs to run effectively. The impact of this work is clear and immediate: faster deals, stronger partner continuity, addressing high priorities, and greater trust with customers and partners. We are seeking a Regulatory Intelligence & Implementation Specialist to drive the strategy and execution of our regulatory intelligence program. This role is responsible for translating complex regulatory requirements into actionable security controls, conducting gap assessments, aligning with internal and external stakeholders on compliance obligations, and building program governance frameworks that standardize service delivery. - Regulatory intelligence and translation: Monitor, analyze, and translate emerging regulatory requirements (US, EU, and global) into actionable security controls and operational guidance for the GSO and cross-functional teams. - Gap assessments: Conduct comprehensive gap assessments between regulatory requirements and current global security controls, identifying remediation needs, driving closure with responsible teams, and surfacing gaps as they enter through executive reporting. - US regulatory alignment: Serve as a strategic liaison with the USDS Joint Venture on regulatory and compliance matters, ensuring alignment between GSO's security posture and USDS obligations. - EU privacy and regulatory obligations: Maintain deep understanding of EU privacy regulations and their impact on security operations, working closely with privacy and legal teams to operationalize compliance. - Control framework integration: Integrate regulatory requirements into our existing control frameworks, ensuring that compliance obligations are mapped to specific controls and evidence sources. - Cross-functional compliance execution: Drive cross-functional execution of compliance initiatives, partnering with privacy, legal, product, engineering, and regional teams to ensure regulatory requirements are met end-to-end. - Program governance and documentation: Develop and maintain comprehensive program governance documentation, including strategy plans, program overviews, regulatory inventories, dashboards, user guides, SLA frameworks, request lifecycle process flows, intake requirements, and RACI matrices. - Stakeholder relationship management: Cultivate and maintain strategic relationships with stakeholders across GSO and cross-functional organizations to ensure alignment and drive program maturity. - Strategy planning and portfolio alignment: Lead strategy planning for the regulatory intelligence function, ensuring objectives and key results are aligned with GSO's broader portfolio and organizational strategy. Directly translate regulatory initiative investments to influence workforce planning. - Regulatory liaison and escalation: Serve as a point of escalation for regulatory issues, ensuring that emerging requirements are surfaced, assessed, and operationalized in a timely manner. Minimum Qualification(s) - Deep knowledge of US and EU regulatory landscapes, particularly data protection, privacy, and platform regulation. - Demonstrated experience conducting gap assessments and driving cross-functional remediation. - Proven ability to develop program governance frameworks, including SLAs, process flows, and inventory management. - Experience working with cross-functional teams including privacy, legal, product, and engineering. - Ability to translate complex regulatory requirements into clear operational guidance. - Demonstrated ability to build strategic relationships across large, matrixed organizations. Preferred Qualification(s) - Bachelor's degree in Law, Public Policy, Information Security, Business, or related field, or equivalent practical experience. - 5+ years of experience in regulatory intelligence, compliance, privacy, or information security, with a focus on regulatory translation and implementation.