Job description
About the TeamPDPO (Privacy and Data Protection Office) is the organization to lead, supervise, and empower all TikTok's privacy work in an accountable and industry leading way.
This team is the expert in the landscape of privacy risks and passionate about consulting across the company on implementing the proper safeguards and technical mitigations to ensure that our users’ privacy is honored across the TikTok's products and platforms.
We are seeking a Technical Privacy Investigator to join our Remediation Operations team, to be based in Singapore, with a focus on standing up and operating a program to drive remediation of outstanding privacy and data protection risks.
This role is ideal for candidates with a background in application security, privacy engineering, or solutions architecture who thrive at the intersection of security, privacy, and scalable system design.
You will play a critical role in upholding the privacy rights of our users, ensuring the protection of their personal information, ensuring compliance with global privacy laws, and promoting the adoption of best practices.
If you are passionate about privacy, data protection, and possess the expertise to assess and enhance our privacy practices, we invite you to join our team and contribute to our mission of maintaining the highest standard of data privacy and security.
You will help analyze systemic privacy/security vulnerabilities, engage directly with product engineers to recommend remediation paths, and relentlessly drive resolution.
You will also support detection and prevention efforts by enabling architectural changes and long-term mitigation strategies—ensuring that privacy and security issues are addressed before they reach production.
Key Responsibilities
- Partner with technical and non-technical stakeholders to validate findings, analyze root causes, and describe vulnerabilities clearly to product teams, engineers, executives, legal, and other internal stakeholders on privacy matters.
- Work directly with engineering teams to recommend, design, and implement optimal fixes or mitigation plans— ranging from code-level changes to architectural redesigns.
- Conduct thematic and systemic analysis to identify patterns of repeated vulnerabilities and propose preventive safeguards.
- Lead technical remediation initiatives to closure by organizing priorities, tracking progress, and escalating blockers as needed.
- Collaborate with first line of defense teams to prevent regressions through test coverage, guardrails, or SDLC process improvements
- Participate in post-incident reviews, produce root cause analyses, and advocate for strategic fixes beyond tactical patching
- Develop and maintain dashboards, SLAs, and workflows for tracking remediation of high-risk findings
Minimum Qualifications:
- 5+ years of experience in privacy engineering, application security, or cloud/software architecture roles
- Strong familiarity with microservices environments, RESTful APIs, containerized infrastructure, and CI/CD pipelines
- Solid knowledge of common privacy/security vulnerabilities, such as: - Insecure Direct Object Reference (IDOR) - Missing/broken authorization logic - Misconfigured API endpoints - Overreliance on client-side controls
- Ability to translate technical findings into prioritized, actionable tasks and influence teams to remediate within timelines
- Demonstrated ability to drive cross-functional collaboration and remediation across privacy, product, and infrastructure teams Preferred Qualifications:
- Experience in vulnerability management, incident response, or threat modeling
- Familiarity with privacy-by-design principles and global privacy regulations (., GDPR, CCPA)
- Experience creating automated detection or monitoring mechanisms for privacy/security violations
- Relevant certifications (., CISSP, OSCP, CSSLP, GCP/AWS cloud certifications)
Required Skill Profession
Computer Occupations
Expertini
Singapore Jobs Expertini
