The mission of TikTok's Global Security Organization is to build and earn trust by reducing risk and securing our businesses and products.
Also known as "GSO", this team is the foundation of our efforts to keep TikTok safe, secure, and operating at scale for over 1 billion people around the world.
We work to ensure that the TikTok platform is safe and secure, that our users' experience and their data remains safe from external or internal threats, and that we comply with global regulations wherever TikTok operates.
Trust is one of TikTok's biggest initiatives, and security is integral to our success.
In whatever ways users interact with us — whether they're watching videos on their For You page, interacting with a Live video, or buying products on TikTok Shop — GSO protects their data and privacy, so they can have a secure and trustworthy experience.
The Security Posture Management (SPM) program is responsible for providing a centralized view of security incident-driven issues across the organization and driving consistent, risk-based remediation across teams.
As a Remediation Manager, you will own the end-to-end lifecycle of security issues from intake and prioritization through remediation and closure.
You will partner with security domain teams, engineering teams, infrastructure teams, and business stakeholders to ensure high-priority security risks are clearly owned and remediated within defined timelines.
This role requires a strong combination of security knowledge, program management, data-driven decision-making, and cross-functional influence. Responsibilities
- Manage security issues identified across multiple sources, including security incidents, vulnerability management, penetration testing, risk assessments, insider risk, and other security programs.
- Establish, customize, and maintain centralized issue tracking and remediation management systems, and continuously enhance automated posture management processes — including findings intake, remediation ticketing, ownership assignment, action planning, severity calibration, escalation, and closure — to streamline operations across Incident Response, Vulnerability Management, and other security domains.
- Partner with security domain teams to conduct root-cause analyses, identify systemic control gaps, and co-design sustainable remediation solutions that translate security findings into executable projects and initiatives.
- Drive end-to-end remediation of high-priority security issues with security domain teams, security BP, engineering, infrastructure, IT, and other stakeholder teams.
- Define clear remediation strategies, action plans, milestones, accountable owners, and target completion dates based on risk and business impact.
- Proactively identify and resolve remediation blockers, cross-team dependencies, ownership gaps, and competing priorities.
- Escalate overdue, blocked, or high-risk issues through appropriate governance and leadership channels when necessary.
- Validate remediation implementation and supporting evidence, partnering with security SMEs to confirm that identified risks have been effectively addressed and closure criteria are met.
- Develop security posture dashboards and reporting to provide clear visibility into remediation roadmaps, progress, key milestones, and overall risk reduction.