The posting
Threat Management, Incident Response, and Investigations protects our global businesses, products, employees, and users across the full security lifecycle. We detect and respond to cyber threats, vulnerabilities, and security risks across the lifecycle, and investigate issues end to end.
Our global team provides prompt security response worldwide, leveraging AI to identify and respond to security issues quickly. You will work on high-stakes problems, from detection and automation to live intelligence-driven incident response and investigation, and see your work protect the company and its users worldwide.
The mission of TikTok's Global Security Organization is to build and earn trust by reducing risk and securing our businesses and products. Also known as "GSO", this team is the foundation of our efforts to keep TikTok safe, secure, and operating at scale for over 1 billion people around the world. We work to ensure that the TikTok platform is safe and secure, that our users' experience and their data remains safe from external or internal threats, and that we comply with global regulations wherever TikTok operates.
Trust is one of TikTok's biggest initiatives, and security is integral to our success. In whatever ways users interact with us — whether they're watching videos on their For You page, interacting with a Live video, or buying products on TikTok Shop — GSO protects their data and privacy, so they can have a secure and trustworthy experience.
The Security Posture Management (SPM) program is responsible for providing a centralized view of security incident-driven issues across the organization and driving consistent, risk-based remediation across teams. As a Remediation Manager, you will own the end-to-end lifecycle of security issues from intake and prioritization through remediation and closure. You will partner with security domain teams, engineering teams, infrastructure teams, and business stakeholders to ensure high-priority security risks are clearly owned and remediated within defined timelines. This role requires a strong combination of security knowledge, program management, data-driven decision-making, and cross-functional influence.
Responsibilities - Manage security issues identified across multiple sources, including security incidents, vulnerability management, penetration testing, risk assessments, insider risk, and other security programs. - Establish, customize, and maintain centralized issue tracking and remediation management systems, and continuously enhance automated posture management processes — including findings intake, remediation ticketing, ownership assignment, action planning, severity calibration, escalation, and closure — to streamline operations across Incident Response, Vulnerability Management, and other security domains. - Partner with security domain teams to conduct root-cause analyses, identify systemic control gaps, and co-design sustainable remediation solutions that translate security findings into executable projects and initiatives. - Drive end-to-end remediation of high-priority security issues with security domain teams, security BP, engineering, infrastructure, IT, and other stakeholder teams. - Define clear remediation strategies, action plans, milestones, accountable owners, and target completion dates based on risk and business impact. - Proactively identify and resolve remediation blockers, cross-team dependencies, ownership gaps, and competing priorities. - Escalate overdue, blocked, or high-risk issues through appropriate governance and leadership channels when necessary. - Validate remediation implementation and supporting evidence, partnering with security SMEs to confirm that identified risks have been effectively addressed and closure criteria are met. - Develop security posture dashboards and reporting to provide clear visibility into remediation roadmaps, progress, key milestones, and overall risk reduction.
Minimum Qualification(s) - Experience managing security findings or remediation programs across multiple technical teams. - Strong understanding of common security risks across areas such as cloud, infrastructure, identity, endpoints, applications, and vulnerabilities. - Demonstrated ability to drive complex cross-functional initiatives without direct authority. - Strong analytical and problem-solving skills with the ability to prioritize issues based on risk and business impact. - Experience developing security metrics, dashboards, or executive-level reporting. - Excellent written and verbal communication skills, including the ability to communicate technical security risks to both technical and non-technical stakeholders.
Preferred Qualification(s) - 5+ years of experience in cybersecurity, security program management, vulnerability management, security operations, risk management, or related fields. - Experience building or operating centralized security issue management or security posture management programs. - Experience with security domains such as incident response, vulnerability management, threat intelligence, etc. - Experience with managing cross-functional remediation programs across multiple regions. - Understanding of security frameworks such as NIST CSF, CIS Controls, ISO 27001, or related standards. - Experience with root-cause analysis and identifying systemic security control gaps. - Experience using automation, data analytics, or AI to improve security operations and remediation workflows.
