Privacy & Cybersecurity Counsel

The Privacy & Cybersecurity Counsel position at TikTok USDS JV is an onsite legal role based in Los Angeles, focused on U.S. privacy regulatory compliance and cybersecurity matters. The role provides legal support across incident response, vendor and data processing risk, and engagement with regulators and enforcement bodies.

Location and Compensation

Location: Los Angeles, CA (onsite)

Salary: USD 217,360 to 398,240 per year

Employees also receive 10 paid holidays per year, 10 paid sick days per year, and 17 days of Paid Personal Time (prorated upon hire with increasing accruals by tenure).

Key Responsibilities

• Coordinate, monitor, and advise on changes to U.S. privacy laws and regulations, with emphasis on state-level privacy requirements and AI governance rules.
• Support Privacy Impact Assessments (PIAs) and partner with security and product teams to integrate Privacy by Design into JV roadmaps.
• Coordinate and oversee policies covering data retention, data mapping, and subject access requests.
• Act as legal lead on the Enterprise Incident Response team, directing privilege handling, risk assessments, and containment actions during data breaches or security incidents.
• Independently manage and coordinate necessary regulatory notifications and law enforcement outreach.
• Partner closely with the Security Officer and the security organization.
• Draft, review, and negotiate Data Processing Agreements and assist with complex technology vendor contracts.
• Advise corporate teams on privacy and cybersecurity due diligence.
• Support Third Party Risk Management processes as necessary.
• Represent the company before data protection authorities and state or federal regulatory bodies as needed.
• Coordinate with outside counsel on privacy or cybersecurity litigation and enforcement defense.

Required Qualifications

• Education: J.D. Degree from an ABA-accredited law school.
• Licensure: Active membership in good standing with a U.S. state bar.
• Experience: 15+ years of law practice, including experience at a fast-paced technology platform company focused on data protection, privacy, and cybersecurity.
• Hands-on experience with U.S. federal and state privacy legislation, international transfer frameworks, and cybersecurity standards (e.g., NIST, ISO 27001).
• Ability to work independently and collaboratively with cross-functional and global teams across time zones, including building processes from scratch.
• Excellent analytical, writing, and communication skills.
• Ability to manage complex incident responses and prioritize competing demands and long-term projects.

Preferred Certifications

• IAPP certifications preferred: CIPP/US, CIPP/E, CIPM, or CIPT.

Tools and Standards

• NIST
• ISO 27001

Benefits

• Medical, dental, and vision insurance (day one access)
• 401(k) savings plan with company match
• Paid parental leave
• Short-term and long-term disability coverage
• Life insurance
• Wellbeing benefits
• 10 paid holidays per year
• 10 paid sick days per year
• 17 days of Paid Personal Time (prorated upon hire with increasing accruals by tenure)
• Additional discretionary bonuses/incentives and restricted stock units (role may be eligible)

Fair Chance and Equal Opportunity Information

For Los Angeles County (unincorporated) candidates: Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state, and local laws, including the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.

Reasonable Accommodation

USDS is committed to providing reasonable accommodations in recruitment processes for candidates with disabilities, pregnancy, sincerely held religious beliefs, or other reasons protected by applicable laws.