Compliance Effectiveness & Reporting Analyst

About the Team

The USDS Security - Governance, Risk & Compliance team is responsible for managing USDS security compliance in accordance with US compliance requirements and objectives, and providing industry leading governance, risk, and compliance services.

The core service offerings include: Compliance & Security Risk Management, Controls & Compliance Framework, Security Compliance Policies, Charters, & Protocols, Vendor Program & Third-Party Risk Management, National Security Reporting and Enablement, and Security & Compliance Behavior & Culture.

About the Role

TikTok USDS JV is seeking a Compliance Effectiveness & Reporting Analyst to join the TikTok Security & Privacy Compliance Governance & Risk Management team. This role builds and operates the mechanisms for reporting on TikTok USDS JV's compliance program, measuring its effectiveness, and identifying opportunities to improve it — including the regulatory reporting required under U.S. compliance obligations. The role partners across Security & Privacy, Legal, and business teams to turn compliance data and reporting into transparent, evidence-based insight into program performance and well-supported actions that strengthen it.

The successful candidate will help build a structured, transparent, industry-leading U.S. regulatory compliance framework and guidelines that adhere to U.S. requirements and objectives, with built-in mechanisms to monitor, report on, and measure compliance and to identify and drive continuous improvement.

Responsibilities

• Design, build, and operationalize the framework for measuring the effectiveness of the U.S. compliance program, including control performance, remediation outcomes, and compliance trends, and define the standards, targets, and methods that make effectiveness measurable and comparable over time
• Develop and manage the program's KPI and KRI suite, dashboards, and scorecards to measure team and control performance and surface key risks to organizational and regulatory compliance
• Own end-to-end preparation and timely submission of U.S. Compliance reports and required deliverables, coordinating contributors across Legal, Security & Privacy, and business teams
• Build and operate standardized, repeatable reporting mechanisms and cadences for executive leadership, governance committees, and regulators, streamlining cross-contributor coordination and reducing manual effort to keep reporting timely, accurate, and scalable
• Ensure reporting accuracy and quality by validating inputs, reconciling inconsistencies, and confirming findings and conclusions are complete and well supported before submission
• Apply critical thinking to compliance reporting: analyze trends and emerging issues, assess root causes and business implications, and present clear, decision-ready findings and recommendations to stakeholders
• Identify program improvement opportunities through reporting insights, benchmarking, and trend analysis; recommend prioritized actions and track their adoption and measured impact
• Contribute to U.S. compliance strategy and roadmap, using effectiveness results and reporting insights to inform program priorities and improvements

Minimum Qualifications

• Bachelor's degree in a related field, or equivalent practical experience. 5+ years of applicable experience; Excellent analytical, critical-thinking, and problem-solving skills, with strong written reporting and communication skills and the ability to influence stakeholders and manage projects end to end
• Strong attention to detail and a commitment to accuracy in high-visibility reporting, with the ability to identify inconsistent information and unsupported conclusions before publication
• Demonstrated ability to improve efficiency and streamline cross-functional processes and deliverables without compromising quality
• Experience working within compliance programs, with knowledge of U.S. compliance frameworks and familiarity with international compliance standards and requirements
• Experience supporting CFIUS, FTC order, or other applicable U.S. regulatory reporting, together with experience conducting risk assessments and tracking treatment plans
• Demonstrated experience designing or operating a compliance or risk effectiveness-measurement program, including metrics, scorecards, control-performance reporting, or maturity assessments, and using measurement results to evaluate program performance over time
• Experience reporting risk (KRIs/KPIs) within a global enterprise, developing a culture of risk-informed decision-making. Demonstrated ability to translate metrics and analysis into actionable, prioritized recommendations and measurable program or process improvements, and to drive adoption across global, cross-functional teams

Preferred Qualifications

• Experience with reporting and analytics tools and dashboarding platforms (e.g., SQL, BI and visualization tools, or GRC platforms) to automate reporting and visualize compliance metrics and trends
• Hold one of the following certifications, or an equivalent industry-recognized certification: CISA, CDPSE, CISM, CRISC, GCIH, GCIA, CRCM, or CCEP.
• Experience with risk and controls frameworks (e.g., ISO 27001, NIST CSF, NIST RMF, FAIR, COBIT, or ISO 31000)
• Familiarity with control testing, compliance monitoring, or assurance methodologies and how assurance results inform program effectiveness reporting