Third Party Risk Management Program Manager

COMPLIANCE

What We Do

We help the company do the right thing by identifying, monitoring, and reporting on potential risks in order to support the company’s goal of promoting trust in our products and services.

What You'll Do

As the Third Party Risk Management (TPRM) Program Manager, you will be responsible for establishing and maintaining a third party risk management framework across a complex, cross-functional team of stakeholders. You will work closely with stakeholders to aid in implementing the TPRM program, focusing on risk tiering, managing third party relationships, and ensuring compliance with established standards. You’ll also be responsible for performing risk assessments, ensuring inventory is complete and accurate, and coordinating across multiple cross-functional teams.

In this role, you will

• Support implementation and maintenance of the TPRM program across the company
• Help minimize third party risks by identifying and translating potential deviations into actionable mitigation plans
• Collaborate across Information Security, Legal, Tech Services, Procurement, and the business to enforce standard risk management policies, procedures, and contractual requirements
• Help maintain a centralized repository of third party information, including third party service providers, vendors, assets, and partners, and related risk assessments, audit reports, and remediation plans
• Assist in due diligence and risk assessment of third parties to assess third party risks
• Support a process for monitoring and periodically re-assessing third parties to ensure compliance with obligations.
• Ensure that informative meeting agendas, meeting materials, and action items are maintained to provide guidance to internal stakeholders and ensure TPRM policies and procedures are current

What we're looking for

• 2-5 years of relevant work experience in TPRM, preferably in a similar industry
• Experience with program or project management, including supporting long-term strategy consisting of multiple smaller projects, defining program strategy, and defining metrics
• Experience with risk domains related to TPRM, including Privacy, Information Security, Compliance, etc.
• Familiarity with relevant frameworks and standards, including ISO, NIST, etc., and familiarity with relevant laws and regulations, including GDPR, CCPA/CPRA,
• Good communication skills and the experience working successfully in a global environment with a diverse group of colleagues
• Strong organizational skills and attention to detail
• Hard worker who is comfortable operating in a complex and dynamic environment; this person will be energized by big challenges and working with excellent people
• Passionate about doing the right thing
• Experience in the tech or gaming industry is a plus

This role is open to multiple locations (including CA, NYC, & WA).

Pay Transparency Information

The expected annual base pay range(s) for this position are detailed below. Each base pay range is relevant only for individuals who are residents of or will be expected to work within the specified locale. Compensation varies based on a variety of factors, which include (but aren’t limited to) things such as skills and competencies, qualifications, knowledge, and experience. In addition to base pay, most employees are eligible to participate in Epic’s generous benefit plans and discretionary incentive programs (subject to the terms of those plans or programs).