Information Security Compliance Manager
Posted on 11/22/2022
INACTIVE
Video game developer (makers of Fortnight)
Company Overview
Epic is a leading interactive entertainment company and provider of 3D engine technology. Epic operates Fortnite, one of the world’s largest games with over 350 million accounts. Epic also develops Unreal Engine, which powers the world’s leading games and is also adopted across industries such as film and television, architecture, automotive, manufacturing, and simulation. Through Unreal Engine, Epic Games Store, and Epic Online Services, Epic provides an end-to-end digital ecosystem for developers and creators to build, distribute, and operate games and other content.
Consumer Software
Gaming
Industrial & Manufacturing
Education
Real Estate
Company Stage
IPO
Total Funding
$15.4B
Founded
1991
Headquarters
Cary, North Carolina
Growth & Insights
Headcount
6 month growth
↓ -8%1 year growth
↑ 0%2 year growth
↑ 37%Locations
Morrisville, NC, USA
Experience Level
Entry
Junior
Mid
Senior
Expert
Desired Skills
Management
Communications
CategoriesNew
Legal & Compliance
Requirements
- 5+ years of general IT/InfoSec experience
- 2+ years compliance program management experience with a specific concentration on Security frameworks/standards (NIST, ISO 27001, SOC 2, CIS etc)
- Strong experience working with regulatory compliance/audit initiatives
- Strong understanding of PCI-DSS with previous experience gaining attestations as a level 1 merchant
- Strong verbal and written communication skills related to compliance, risk and security
- Strong project and time management skills, with an ability to prioritize, creatively solve problems, support multiple concurrent projects, and meet deadlines
- CISM/CISA a plus!
Responsibilities
- Own and drive various security compliance project initiatives across InfoSec and other business units
- Work with stakeholders to design relevant security standards across Epic's enterprise and ensure these standards are upheld
- Build relevant management dashboards and actively contribute technical expertise to compliance reporting and analyses
- Identify potential compliance gaps and lead work streams needed to address them
- Own the security risk management process and maintain our risk register
- Periodically provide project updates and security compliance/risk health scorecards to key stakeholders in a timely fashion