Third Party Risk Management Analyst

Every day, ePayPolicy helps over 7,500 insurance companies speed up incoming and outgoing payments. By helping them move from manual, outdated forms of payment collection to modern payment tools, we help their companies work faster and more efficiently. (Check out our almost 5-star customer reviews.)

How do we do it? With powerful payment tools that just work. Our secure, online ACH and credit card payment page is the core product for many of our companies. But we also provide an integrated suite of helpful features for insurance companies of all sizes, including point-of-sale financing, payables network tools and check reconciliation, all within a single dashboard.

Our expert, live support team helps deliver exceptional care every day, with an industry-leading 97% customer retention rate. Our customers love us. We love them.

Founded in 2014, our growing team is based in Austin, TX, and has clients in all 50 US states. We’ve grown over 300% in the last three years - with big plans for the future.

Job Description:

The Third-Party Risk Management (TPRM) Analyst will play a crucial role in evaluating vendors' compliance with industry standards such as PCI DSS 4.0, SOC 2, HIPAA, and AI ethical practices. This is an excellent opportunity to gain hands-on experience in third-party risk management, compliance, and cybersecurity.

In this role, you will:

• Gain familiarity with ePayPolicy Security Program controls within the context of PCI-DSS.

• Assist with information-gathering requests to existing vendors and service providers.

• Review vendor documentation (such as PCI AoC, SOC 2 Report, or Security Questionnaires) and prepare vendor analysis sheet for review.

• Analyze vendors who employ AI and Machine Learning in their services for best practices for AI Governance and Risk Mitigation.

• Assist with Procurement requests for new vendors and resources, including research and analysis, documentation gathering, and risk assessment.

• Ensure that proper policy and process are followed for documenting compensating controls or remediation plans for vendors.

• Communicate with vendors and service providers in a timely, professional manner.
  

What you bring:

• Completed a degree or program of study in Cybersecurity, Information Technology, Governance and Risk Compliance, or a related field.

• Basic understanding of compliance standards such as PCI DSS, SOC 2, HIPAA, and ethical AI guidelines.

• 1-2 years of experience with vendor assessments preferred.

• Strong analytical skills with attention to detail.

• Strong communication and interpersonal skills.

• Ability to manage multiple tasks and work independently with minimal supervision.

• Strong understanding of IT security practices and protocols.
  

Why ePayPolicy

• Competitive salary

• Comprehensive benefits package with employer-paid basic life and disability premiums

• 401K

• Unlimited PTO

• Company-sponsored quarterly “ePayItForward” initiatives 

• Supportive and inclusive company culture with a focus on work/life balance

• Fully-stocked kitchen

• Lunch stipend when working onsite

• Open communication (We won’t box you in! If you have a cool idea for a product improvement or a suggestion on how to improve the customer experience, let’s talk about it. We value everyone’s ideas and opinions.)

• Huge opportunity for growth

We operate on a hybrid schedule for in-office employees. Standard schedules are three days per week in the office, however, the cadence and days are determined by each team and manager. 

We value diversity here at ePayPolicy and understand the importance of creating a safe and comfortable work environment, encouraging individualism and authenticity in every member of our team. We strive to create an accessible and inclusive experience for all candidates. If you need an accommodation during the application or recruiting process, please submit a request to our team via this Interview Accommodation form: https://forms.gle/xKppyKTSqfTUi7hz5