Data Protection Incident Responder - USDS

The US Security and Privacy Operations - Data Protection Incident Responder reports to the USDS Resiliency Operations Center Lead. This role is responsible for managing incidents escalated from business units to investigate, coordinate cross‑functional triage and mitigation activities, remediation coordination and tracking, reporting and communication, and escalation to the Enterprise Incident Response Lead if the incident reaches a crisis threshold. This position also operates under a hybrid work model, requiring in‑office presence 3 days a week, or as directed by the manager/department.

Specific requirements may change as the hybrid model is reviewed.

• Report to the USDS Resiliency Operations Center Lead and manage incidents escalated from business units to investigate, coordinate cross‑functional triage and mitigation activities, remediation coordination and tracking, reporting and communication, and escalate to the Enterprise Incident Response Lead if the incident reaches a crisis threshold.
• Ensure incident response processes are executed to support incident remediation activities, communications, and connection to crisis management if necessary.
• Communicate incident response concepts and protocols in a digestible manner to non-technical audiences.
• Support tracking/maintenance/advancement/execution of USDS Incident Response projects.
• Actively participate in incident response activities and escalate to crisis as needed.
• Know incident response plans and procedures, including identification, remediation, containment, and eradication procedures.
• Know Crisis Management Plans and procedures, thresholds, and execute activation procedures.
• Synthesize technical details of critical incidents to executive management and provide immediate containment and eradication recommendations.

This position follows a hybrid work schedule that requires employees to work in the office 3 days a week, or as directed by their manager/department. We regularly review our hybrid work model, and the specific requirements may change at any time.

• Bachelor’s Degree or industry‑equivalent work experience in Cyber Security, emergency management, or crisis management with a focus on security analytics and incident response, along with 3+ years of experience in incident management operations, crisis management planning, and/or exercises, as well as identifying and responding to threats and threat actors.
• Excellent communication (verbal and written) and collaboration skills, and ability to influence without authority.
• Demonstrated teamwork and collaboration skills, including leading or contributing to global and multi‑functional teams, along with demonstrated time management, problem‑solving, effort prioritization, and interpersonal skills.
• Work well under pressure and within constraints to solve problems and meet objectives, with strong analytical/problem‑solving skills and cross‑functional expertise across multiple IT operational and security disciplines.
• Experience in emergency operations, planning, and/or exercises, including program design and implementation.
• Strong project management skills and thought leadership.
• Coordinating high‑profile, complex incident situations.

• Social media, entertainment, startup, and/or tech industry experience

Tik Tok is the leading destination for short‑form mobile video. Our mission is to inspire creativity and bring joy. U.S. Data Security (USDS) is a subsidiary of Tik Tok in the U.S. This new, security‑first division was created to bring heightened focus and governance to our data protection policies and content assurance protocols to keep U.S. users safe. Our focus is on providing…