Security Engineer, Riot Games

• Ability to communicate technical concepts to non-technical audiences
• Experience in GRC tools and modules such as OneTrust, ServiceNow, Fusion Risk Management etc
• Experience in automating the auditing and assessment of information security controls
• 3-5 years of experience in Information Security Engineering roles
• 3+ years of experience in Third Party Risk Management roles
• Desired Qualifications:

Desirable

• We are looking for a Security Engineer focused on third party security risk management to help mature and expand our existing foundational program
• You will report to the third party security manager and will define and then implement our third party security risk strategy
• The goal is to level up 3rd party security standards, perform assessments, track and report the security posture of our vendors and partners, and leverage technology to help Riot make quicker and better security informed decisions
• You will build a program that enables Riot to move quickly in M+A and external development while ensuring we don't compromise on our most important security and privacy goals
• Support the onboarding and oversight of important supplier and client relationships
• Partner with other security teams to automate and speed up the 3rd party risk assessment and onboarding process
• Help with regulatory, client, internal or other third-party audit/assessment requests
• Develop or refine assessment and risk management processes
• Partner with internal stakeholders to help them make intelligent risk decisions in supplier selection and acquisitions
• Prepare regular reporting on risk exposure for supplier and client audits/assessments
• Communicate to internal stakeholders regarding third-party events
• Contribute to team discussions to support a positive security culture and help grow our program