Technology Internal Audit Lead

Overview

Internal Audit serves as a critical global function that offers independent assurance by assessing the company's risk management, governance, and internal controls to ensure their effective design and operation. The team undertakes risk-based audits covering operational, compliance, IT, and financial aspects, collaborating with business units to identify risks and enhance controls through thorough audits and monitoring remediation efforts.

Position Summary

This experienced Technology Internal Audit Lead role is part of the Global Technology Audit team, supporting TikTok and other non-China products. The incumbent will steer technology audits and risk reviews, employing innovative audit approaches to influence positive business outcomes across key products including TikTok, TikTok Shop, and Dola.

Key Responsibilities

• Lead and manage technology audit programs and detailed control assessments, focusing on products powered by large language models (LLMs), information security, infrastructure, and privacy.
• Evaluate technical architectures for AI/ML systems, specifically examining data flows, model training and fine-tuning procedures, model deployment infrastructure, and integration with downstream applications.
• Utilize advanced data analytics techniques to identify risk indicators and gain insights pertaining to AI/ML model controls, covering data quality, privacy, security, access, safety testing, hallucination mitigation, evaluation metrics, adversarial testing (red-teaming), and output monitoring.
• Develop practical, risk-based recommendations to address root causes while balancing product, engineering, regulatory, and business considerations. Engage effectively with complex, custom technology stacks and collaborate closely with engineering and product teams.
• Build and sustain cooperative relationships with management teams, serving as a trusted advisor for internal controls and business risk management, and support design and implementation of technology solutions.
• Ensure audit work meets quality, consistency, and professional standards while continuously seeking opportunities to enhance audit processes.

Qualifications

• Minimum of five years' relevant experience in technology audits, product security, security engineering, security compliance, or consulting in a fast-paced, product-focused environment.
• Strong foundational knowledge across multiple cybersecurity domains, including Identity and Access Management (IAM), cryptography, key management, application and web security, security protocols, API design, threat intelligence, network and hardware security, and vulnerability management.
• Demonstrated analytical proficiency in evaluating complex technology environments against risk assessments, regulatory requirements, best practices, and internal standards.
• Excellent problem-solving, critical thinking, communication, and collaboration abilities, capable of constructively challenging business teams on technical matters.

Preferred Experience

• Background in technology sectors such as social media, content management, or financial technology.
• Deep expertise in LLMs, machine learning pipelines, model lifecycle management, and data engineering architectures.
• Experience operating within a dynamic, global technology company across multiple time zones.
• Familiarity with AI/ML frameworks (e.g., PyTorch, TensorFlow, HuggingFace), application and infrastructure security vulnerabilities and mitigations (e.g., OWASP Top 10, CWE 25), source code and DevOps tools (e.g., GitHub, Bitbucket), and cloud platforms (AWS, Azure, GCP).
• Relevant industry certifications such as CISSP, CISM, GIAC, CCNA, CISA, CRISC, or CIA.
• Ability to navigate ambiguous scenarios and collaborate with global teams.
• A strong enthusiasm for emerging technologies, products, and industry standards.

About the Company

Founded in 2012, ByteDance aims to inspire creativity and enrich people's lives. Its diverse portfolio includes TikTok, Lemon8, CapCut, Pico, and platforms catering specifically to the China market, making it easier and more enjoyable for users to connect, consume, and create content.

Why Join ByteDance

ByteDance prioritizes inspiring creativity through innovative products that enable authentic self-expression, discovery, and connection. Its vibrant, diverse teams foster continuous growth with curiosity, humility, and impactful work in a rapidly expanding tech company. Together, the teams pursue meaningful breakthroughs, embracing an "Always Day 1" mindset to unlock limitless potential.

Diversity & Inclusion

ByteDance is dedicated to building an inclusive environment where employees’ diverse skills, experiences, and perspectives are celebrated. Its global platform reflects a commitment to diversity that connects a wide range of communities and voices.