Privacy & Cybersecurity Counsel

About the Team

Our Legal and Compliance team provides key support for all TikTok USDS Joint Venture's innovative initiatives, state-of-the-art products, and integrated platforms. We help our technological and business teams enable their vision by providing integrated legal and compliance guidance and support.

Responsibilities

• Regulatory Compliance & Strategy: Coordinate, monitor, and advise on changing US privacy laws and regulations with a focus on state-level privacy laws and AI governance rules. Assist with Privacy Impact Assessments (PIAs) and collaborate with security and product teams to embed Privacy by Design into JV roadmaps. Coordinate and oversee policies regarding data retention, data mapping, and subject access requests)
• Incident Response & Cybersecurity: Serve as the legal lead on the Enterprise Incident Response team, directing privilege, risk assessments, and containment actions during data breaches or security incidents. Independently manage and coordinate necessary regulatory notifications and law enforcement outreach. Partner closely with Security Officer and security apparatus.
• Commercial Transactions & Vendor Risk: Draft, review, and negotiate Data Processing Agreements and assist with complex tech vendor contracts. Advise corporate teams on privacy and cybersecurity due diligence. Support Third Party Risk Management processes as necessary.
• Regulatory Engagement & Disputes: Represent the company before data protection authorities and state/federal regulatory bodies as needed. Coordinate with outside counsel on privacy or cybersecurity litigation and enforcement defense.

Minimum Qualifications

• J.D. Degree from an ABA-accredited law school and active membership in good standing with a U.S. state bar.
• CIPP/US, CIPP/E, CIPM, or CIPT certifications from the IAPP preferred.
• 15+ years of law practice, including experience at a fast-paced technology platform company, focused on data protection, privacy, and cybersecurity.
• Hands-on experience with US federal/state privacy legislation, international transfer frameworks, and cybersecurity standards (e.g., NIST, ISO 27001).
• Ability to work independently and collaboratively with cross-functional and global teams across various time zones and building processes from scratch.
• Excellent analytical, writing and communications skills.
• Ability to manage complex incident responses and prioritize and manage competing demands and long-term projects.