Compliance

What We Do

We help the company do the right thing by identifying, monitoring, and reporting on potential risks in order to support the company’s goal of promoting trust in our products and services.

What You'll Do

As the Third Party Risk Management (“TPRM”) Program Manager, you will be responsible for implementing and maturing a third party risk management framework across a complex, cross-functional team of stakeholders. You’ll develop the program strategy and objectives, design appropriate safeguards, and manage the full TPRM lifecycle, including risk tiering, maturing the review processes for existing third parties, and establishing program metrics, SLAs, and KPIs. You’ll also be responsible for identifying privacy risks, reporting to leadership, and coordinating across multiple cross-functional teams.

In this role, you will

• Own the TPRM program and framework
• Lead the roll out of the TPRM program across the company
• Collaborate across Information Security, Legal, Tech Services, Procurement, and the business to enforce standard risk management policies, procedures, and contractual requirements
• Maintain a centralized repository of third party information, including third party service providers, vendors, assets, and partners, and related risk assessments, audit reports, and remediation plans
• Lead due diligence and risk assessment of third parties to assess third party risks
• Establish a process for monitoring and periodically re-assessing third parties to ensure compliance with obligations.
• Provide expertise, training, and guidance to internal stakeholders on TPRM policies and procedures

What we're looking for

• 8+ years of relevant work experience in TPRM, preferably in a similar industry
• Experience developing, scaling, and leading a TPRM program
• Significant experience with risk domains related to TPRM, including Privacy, Information Security, Compliance, etc.
• Familiarity with relevant frameworks and standards, including ISO, NIST, etc., and familiarity with relevant laws and regulations, including GDPR, CCPA/CPRA
• Significant experience with program or project management, including developing long-term strategy consisting of multiple smaller projects, defining program strategy, and defining metrics
• Experience in large organizations requiring collaboration and coordination across diverse stakeholder groups to align the company to successfully execute on a vision
• Exceptional communication skills and the experience working successfully in a global environment with a diverse group of colleagues
• Hard worker who is comfortable operating in a complex and dynamic environment; this person will be energized by big challenges and working with excellent people
• Passionate about doing the right thing

EPIC JOB + EPIC BENEFITS = EPIC LIFE

Our intent is to cover all things that are medically necessary and improve the quality of life. We pay 100% of the premiums for both you and your dependents. Our coverage includes Medical, Dental, a Vision HRA, Long Term Disability, Life Insurance & a 401k with competitive match. We also offer a robust mental well-being program through Modern Health, which provides free therapy and coaching for employees & dependents.

Throughout the year we celebrate our employees with events and company-wide paid breaks. We offer unlimited PTO and sick time and recognize individuals for 7 years of employment with a paid sabbatical.

Pay Transparency Information

The expected annual base pay range(s) for this position are detailed below. Each base pay range is relevant only for individuals who are residents of or will be expected to work within the specified locale. Compensation varies based on a variety of factors, which include (but aren’t limited to) things such as skills and competencies, qualifications, knowledge, and experience. In addition to base pay, most employees are eligible to participate in Epic’s generous benefit plans and discretionary incentive programs (subject to the terms of those plans or programs).