Senior Compliance Internal Auditor

岗位职责 / Responsibilities

About the Team:

Internal Audit is a global function responsible for providing independent assurance and evaluating the company's risk management, governance and internal control processes to determine if they are designed and operating effectively. The Internal Audit team plans and executes audit projects according to our risk-based audit plan by evaluating financial, compliance, operational, and IT processes and controls. We work with business functions in addressing risks and improving the control environment through timely and comprehensive audit work and tracking of remediation actions until completion.

Position Summary:

We are looking for an experienced Senior Compliance Auditor to contribute to the ongoing development of the Compliance pillar using innovative assurance methods to impact and influence positive business outcomes. The role will build and mature the compliance audit capabilities in Privacy, Content Safety, AI Governance and other compliance areas using innovative assurance methods to impact and influence positive business outcomes across products such as TikTok and TikTok Shop.

Responsibilities:

- Audit Management & Execution: Lead planning and execution of compliance audit programs and support risk assessments. Leverage AI and data analytics to detect risk signals and unearth insights. Communicate issues and recommendations to senior management.

- Stakeholder Relationships: Develop and maintain collaborative working relationships with management, understand the business to provide value-added services, and establish credibility within the responsible domains.

- Subject Matter: Ability to grasp complex, home grown technology stack, comfortable talking with legal and product teams; and be the go-to person on compliance topics such as Privacy & Data protection, AI Governance and regulatory frameworks. Understanding emerging compliance hot spots and build a robust framework to help manage changing compliance landscape.

- Perform regular, periodic follow-ups on audit recommendations to evaluate the adequacy of corrective actions.

- Audit Program Development: Collaborate with the Global Compliance Lead and peers to develop and implement an audit program for compliance and integrated audits, tailored to TikTok and other company products (example: TikTok LIVE, TikTok Shop etc.).

- Quality Assurance: Ensure the overall quality and consistency of audit work, adhering to department and professional standards. Continuously seek opportunities for audit process improvement.

- Audit Techniques: Identify and develop audit techniques, including continuous auditing, data analysis, and monitoring using internal platforms and technology.

- Travel internationally to business locations across EMEA, SEA and AMS, up to 30%

任职要求 / Requirements

Minimum Qualifications:

- Portfolio Management: Demonstrated experience managing a portfolio of audits, with concurrent oversight and execution of multiple projects.

- Professional interests: Passion for decoding compliance, products and standards. Strong critical thinking skills combined with the ability to provide a credible technical challenge to the business.

- Industry experience: Proven ability to work in a fast-paced environment with a product centric culture.

- Analytical skills: Proven analytical ability to assess complex technology environments against risk assessment outcomes, industry best practices, internal standards and external regulatory requirements.

- Communication skills: Strong written and verbal communication skills appropriate for executive reporting and presentation.

- Global Experience: Experience working in a global organization and managing projects across different time zones (Americas, APAC and EMEA).

- Experience: 5+ years of experience in internal audit, compliance or compliance adjacent fields.

Preferred Qualifications:

- Understanding of data protection and privacy frameworks (eg. GDPR).

- Ability to identify gaps in privacy controls and regulatory frameworks and provide risk-based recommendations for remediation.

- Knowledge of regulations, compliance testing methodologies, and risk management principles as it applies to fast growth technology companies.

- Experience of working at a startup company or tech company is a plus.

- Education: Bachelor's degree in law, IT, business or any other related field.

- Knowledge of external current and upcoming risk and controls frameworks such as DSA, DMA, EU AI Act, etc. is a plus but not essential.

- Certifications: Professional certifications such as CISA, CIA, ACA etc.