Responsibilities

Internal Audit is a global function responsible for providing independent assurance and evaluating the company's risk management, governance and internal control processes to determine if they are designed and operating effectively. The Internal Audit team plans and executes audit projects according to our risk-based audit plan by evaluating operational, compliance, IT, and financial processes and controls. We work with business functions in addressing risks and improving the control environment through timely and comprehensive audit work and tracking of remediation actions until completion. We are seeking an experienced Global Payments Technology Internal Audit Lead to join the Global Technology Audit team. The role will primarily support TikTok businesses operating outside China and will be responsible for leading audits and risk reviews across the company's global payment, lending, and financial technology ecosystem. The individual will utilize innovative assurance methods to impact and influence positive business outcomes across payment products for TikTok. This individual will report to the Head of Global Payments Technology Audit Leader and evaluate the technology, security, operational resilience, data, and regulatory risks associated with payment processing, digital wallets, merchant and creator payments, lending products, and supporting financial infrastructure. The role provides an opportunity to shape the audit strategy and assurance approach for rapidly evolving financial products operating across multiple jurisdictions. Responsibilities: - Audit Delivery: Develop and execute the global Technology Audit strategy for payment, lending, and other regulated financial products across TikTok businesses outside China. Lead complex, risk-based technology audits and advisory reviews from planning through reporting, including risk assessment, scoping, control evaluation, testing, issue development, and executive communication. - Payments and Financial Product Coverage: Lead or support reviews covering areas such as: - Payment Technology Architecture and Platforms: Payment system architecture, including infrastructure, data flows, application controls, digital wallets, and stored-value products. - End-to-End Payment Processing: Payment acceptance, authorization, clearing, settlement, reconciliation, and disbursement across consumer, merchant, and platform payment flows. - Payment Security and Integrations: Encryption, tokenization, secure data transmission, API security, service-to-service authentication, and third-party integrations. - Technology Risk Assessment: Develop practical, risk-based recommendations that address root causes while considering product, engineering, regulatory, and business requirements. Ability to grasp complex, home grown technology stack, comfortable speaking with engineers and product teams. - Data Analytics / AI: Leverage data analytics to detect risk signals and unearth insights. Apply AI technologies to develop innovative AI-based audit solutions and perform audit testing. Communicate issues and recommendations to senior management. Collaborate with risk owners to ensure risk mitigation plans are developed and completed, tracking and reporting on the progress of the remediation plans on a regular basis. - Stakeholder Relationships: Develop and maintain collaborative working relationships with management, understand the business to provide value-added services, and establish credibility as a management consultant and internal controls resource. Partner with engineering and product teams to advise on design and implementation of technology solutions. - Quality Assurance: Ensure the overall quality and consistency of audit work, adhering to department and professional standards. Continuously seek opportunities for audit process improvement.

Qualifications

Minimum Qualifications: - At least 5 years of relevant experience in technology auditing, assessing financial technology (FinTech), regulated payment, or lending products. - Experience leading complex technology audits or risk reviews independently from planning through reporting. - Strong understanding of payment systems, financial transaction flows, technology architecture, and supporting control environments. - Proven analytical ability to assess complex technology environments against risk assessment outcomes, industry best practices, internal standards and external regulatory requirements. - Excellent problem solving, critical thinking, collaboration and communication skills combined with the ability to provide a credible technical challenge to the business. - Strong professional judgment and the ability to make risk-based decisions in complex and evolving environments. Preferred Qualifications: - Familiarity with payment regulatory requirements from Payment Services Directive (PSD2), Digital Operational Resilience Act (DORA), Payment Services Regulation (PSR), Anti-Money Laundering Directive (AMLD) - strong customer authentication, operational resilience, outsourcing, consumer lending, open banking, and financial data protection. - Ability to evaluate complex technical environments and identify risks that may affect customers, financial integrity, regulatory compliance, or business operations. - Experience with data analytics, automated audit testing, SQL, Python, or other technology-enabled audit techniques. - Relevant professional certifications such as CISA, CISSP, CRISC, or CIA. - Experience working in a fast-paced, global technology company or rapidly scaling financial technology environment across different time zones.

Job Information

[For Pay Transparency]Compensation Description (Annually)

The base salary range for this position in the selected city is $121600 - $208800 annually.

Compensation may vary outside of this range depending on a number of factors, including a candidate's qualifications, skills, competencies and experience, and location. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work, and this role may be eligible for additional discretionary bonuses/incentives, and restricted stock units.

Benefits may vary depending on the nature of employment and the country work location. Employees have day one access to medical, dental, and vision insurance, a 401(k) savings plan with company match, paid parental leave, short-term and long-term disability coverage, life insurance, wellbeing benefits, among others. Employees also receive 10 paid holidays per year, 10 paid sick days per year and 17 days of Paid Personal Time (prorated upon hire with increasing accruals by tenure).

The Company reserves the right to modify or change these benefits programs at any time, with or without notice.

For Los Angeles County (unincorporated) Candidates:

Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state, and local laws including the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Our company believes that criminal history may have a direct, adverse and negative relationship on the following job duties, potentially resulting in the withdrawal of the conditional offer of employment:

1. Interacting and occasionally having unsupervised contact with internal/external clients and/or colleagues;

2. Appropriately handling and managing confidential information including proprietary and trade secret information and access to information technology systems; and

3. Exercising sound judgment.