Third Party Risk Management Program Manager

COMPLIANCE

What We Do

We help the company do the right thing by identifying, monitoring, and reporting on potential risks in order to support the company’s goal of promoting trust in our products and services.

What You'll Do

As the Third Party Risk Management (TPRM) Program Manager, you will be responsible for establishing and maintaining a third party risk management framework across a complex, cross-functional team of stakeholders. You will work closely with stakeholders to aid in implementing the TPRM program, focusing on risk tiering, managing third party relationships, and ensuring compliance with established standards. You’ll also be responsible for performing risk assessments, ensuring inventory is complete and accurate, and coordinating across multiple cross-functional teams.

In this role, you will

• Support implementation and maintenance of the TPRM program across the company
• Help minimize third party risks by identifying and translating potential deviations into actionable mitigation plans
• Collaborate across Information Security, Legal, Tech Services, Procurement, and the business to enforce standard risk management policies, procedures, and contractual requirements
• Help maintain a centralized repository of third party information, including third party service providers, vendors, assets, and partners, and related risk assessments, audit reports, and remediation plans
• Assist in due diligence and risk assessment of third parties to assess third party risks
• Support a process for monitoring and periodically re-assessing third parties to ensure compliance with obligations.
• Ensure that informative meeting agendas, meeting materials, and action items are maintained to provide guidance to internal stakeholders and ensure TPRM policies and procedures are current

What we're looking for

• 2-5 years of relevant work experience in TPRM, preferably in a similar industry
• Experience with program or project management, including supporting long-term strategy consisting of multiple smaller projects, defining program strategy, and defining metrics
• Experience with risk domains related to TPRM, including Privacy, Information Security, Compliance, etc.
• Familiarity with relevant frameworks and standards, including ISO, NIST, etc., and familiarity with relevant laws and regulations, including GDPR, CCPA/CPRA,
• Good communication skills and the experience working successfully in a global environment with a diverse group of colleagues
• Strong organizational skills and attention to detail
• Hard worker who is comfortable operating in a complex and dynamic environment; this person will be energized by big challenges and working with excellent people
• Passionate about doing the right thing
• Experience in the tech or gaming industry is a plus

EPIC JOB + EPIC BENEFITS = EPIC LIFE

Our intent is to cover all things that are medically necessary and improve the quality of life. We pay 100% of the premiums for both you and your dependents. Our coverage includes Medical, Dental, a Vision HRA, Long Term Disability, Life Insurance & a 401k with competitive match. We also offer a robust mental well-being program through Modern Health, which provides free therapy and coaching for employees & dependents. Throughout the year we celebrate our employees with events and company-wide paid breaks. We offer unlimited PTO and sick time and recognize individuals for 7 years of employment with a paid sabbatical.