AI Governance Program Manager - Privacy and Data Protection Office

About the team
PDPO(Privacy and Data Protection Office) is the organization to lead, supervise, and empower all TikTok's privacy work in an accountable and industry leading way. This team is the expert in the landscape of privacy risks and passionate about consulting across the company on implementing the proper safeguards and technical mitigations to ensure that our users’ privacy is honored across the TikTok's products and platforms. With the rapid development of AI technologies, the team also drives AI compliance governance work, integrating privacy-by-design and AI principles into the full lifecycle of AI products and services.

What you’ll do:
- Responsible for the risk identification, evaluation, governance, improvement and tracking of data protection, to address data protection pain points in business such as e-commerce, video creation, education, international payment, etc., and cooperate with the legal team to transform legal compliance requirements into solutions, deal with corresponding risks, and further precipitate into standard compliance programs and guidelines to improve business compliance efficiency.
- Responsible for the implementation of the company's privacy protection program and AI compliance frameworks.
- Promote the implementation of the company's privacy protection and AI compliance programs; drive the development of data security, privacy protection, and AI compliance automation tools.
- Participating in technical and compliance discussions with engineering and information security peers. Track and benchmark the latest international legal and regulatory requirements on AI, continuously promote the rectification of data, privacy, and AI compliance gaps.
- Establishing and promoting both process and technical systems of business privacy protection, and ensure the risk convergence and privacy protection technology landing in business scenarios.

Minimum Qualifications:
- Industry experience in driving change in technology companies, with a focus on privacy or AI compliance.
- Bachelor degree or above in information security, computer science, information system, law, AI, data science or related majors, or equivalent work experience.
- Privacy protection and AI compliance related experience, with solid background knowledge of enterprise security, AI technology, and compliance management.
- Privacy certifications from bodies such as the IAPP are preferred, including: CIPP/E, AIGP and etc.
- Familiar with domestic and international laws and regulations, such as cybersecurity law, GDPR, HIPAA, etc.

Preferred Qualifications:
- Proficiency in PIA/DPIA methodologies, with experience in presiding over or participating in privacy-by-design work for AI systems (e.g., generative AI, recommendation algorithms). •Participated in GDPR, CCPA, ISO27001, ISO27701 initiatives and AI compliance projects (e.g., AI system compliance assessment, algorithm transparency implementation).
- Deep understanding of EU AI Act, domestic Generative AI Management Measures, NIST AI Risk Management Framework, and other global AI laws and standards.
- Rich experience in AI compliance, including AI data governance, AI transparency implementation, or AI regulatory engagement.