Head of Global Security Legal

The Global Security Legal team is seeking a highly experienced, bright and capable team leader. The team plays a central role in helping TikTok and its parent company, ByteDance build, scale, and operate information security governance frameworks across the globe. We partner closely with operational, engineering, product, and legal stakeholders across the organization to develop practical solutions that support innovation while protecting user and company data.

The team's core functions include translating evolving legal and regulatory requirements into scalable processes, standards, and governance structures that can be implemented across products, functions, and regions; partnering cross-functionally to respond to privacy and security incidents and events; and developing strategies to mitigate emerging legal risks in the AI space.

Responsibilities: - Manage a team of legal professionals within the information security, physical security, and incident response vertical on the Global Privacy and Security Legal team - Oversee and manage the day to day legal support for incident response, covering information security, privacy, safety, and other breaches and incidents - Advise on the development and implementation of information security and data protection policies and processes - Provide thought leadership on security-related regulatory and litigation matters that may impact the company - Collaborate with security teams on matters relating to data assurance, data protection, threat defense, risk management, and regulatory compliance - Work with legal and product teams globally to review products, features, new applications and initiatives to provide legal risk mitigation strategies and ensure legal compliance for products from an information security perspective - Provide support to procurement and commercial teams with respect to information security aspects of contract and relationship discussions with third parties - Coordinate with legal, information security, trust & safety, privacy & data protection, and other cross-functional colleagues on all matters related to information security and incident response, including communication, policy development, and enforcement aspects