Third Party Risk Management Program Manager

Epic Games - Cary, NC

Full-time - Mid Level

Cary, NC

Publishing Industries

About the position

The Third Party Risk Management (TPRM) Program Manager at Epic Games is responsible for establishing and maintaining a comprehensive third party risk management framework. This role involves collaborating with various stakeholders to implement the TPRM program, focusing on risk tiering, managing third party relationships, and ensuring compliance with established standards. The manager will perform risk assessments, maintain accurate inventories, and coordinate across multiple teams to support the company's goal of promoting trust in its products and services.

Responsibilities

• Support implementation and maintenance of the TPRM program across the company
• Help minimize third party risks by identifying and translating potential deviations into actionable mitigation plans
• Collaborate across Information Security, Legal, Tech Services, Procurement, and the business to enforce standard risk management policies, procedures, and contractual requirements
• Help maintain a centralized repository of third party information, including third party service providers, vendors, assets, and partners, and related risk assessments, audit reports, and remediation plans
• Assist in due diligence and risk assessment of third parties to assess third party risks
• Support a process for monitoring and periodically re-assessing third parties to ensure compliance with obligations
• Ensure that informative meeting agendas, meeting materials, and action items are maintained to provide guidance to internal stakeholders and ensure TPRM policies and procedures are current

Requirements

• 2-5 years of relevant work experience in TPRM, preferably in a similar industry
• Experience with program or project management, including supporting long-term strategy consisting of multiple smaller projects, defining program strategy, and defining metrics
• Experience with risk domains related to TPRM, including Privacy, Information Security, Compliance, etc.
• Familiarity with relevant frameworks and standards, including ISO, NIST, etc., and familiarity with relevant laws and regulations, including GDPR, CCPA/CPRA
• Good communication skills and the experience working successfully in a global environment with a diverse group of colleagues
• Strong organizational skills and attention to detail
• Hard worker who is comfortable operating in a complex and dynamic environment; this person will be energized by big challenges and working with excellent people
• Passionate about doing the right thing

Nice-to-haves

• Experience in the tech or gaming industry is a plus

Benefits

• 100% coverage of medical premiums for employees and dependents
• Dental and vision insurance
• Long Term Disability insurance
• Life Insurance
• 401k with competitive match
• Robust mental well-being program through Modern Health, providing free therapy and coaching for employees and dependents
• Unlimited PTO and sick time
• Paid sabbatical after 7 years of employment
• Company-wide paid breaks and events throughout the year