Program Manager, Enterprise Risk

Do you have a passion for SaaS, compliance, and business continuity? We atOutreach.io need a well-organized governance, risk, and compliance professional to help operate and mature these foundational programs. We are looking for a capable professional, experienced in both business continuity and third party risk management, to build and manage our business continuity program and assist in the assessment of our vendors. This role blends program management skills together with traditional analytical expertise and a compliance background together in order to successfully plan for and drive forward these programs.

Reporting to the Director of Governance, Risk, and Compliance, you will be working with our GRC, security, and privacy teams, as well as, various levels of management, and our external auditors.

Your Daily Adventure will Include:

• Responsible for documenting, and maturing, the Crisis Management, Business Continuity, and Third Party program requirements.
• Oversee the evolution of Outreach’s Business Continuity plans 
• Develop and implement Business Continuity Training, to bring awareness to the importance of and existence of business continuity at Outreach 
• Define and audit, the success metrics of engagement / participation within the organization
• Manage the Business Continuity lifecycle, including but not limited to BIAs, plan updates, walkthroughs, and executive signoffs.
• Partner with other members of our team to analyze the risk of critical applications, downtime, and upstream/downstream impact of operations; building Outreach risks into our business continuity strategy 
• Provide input, and manage, the Business Continuity and Third Party Risk Management Roadmaps 
• Implement, test, and audit the Emergency Notification System; including the critical members/contact information, etc.
• Create a community of Business Continuity members within Outreach; launch semi-annual committee meetings to raise awareness to stakeholders regarding important updates and required training.
• Represent the function of Business Continuity and TPRM in our external audits 
• Be proactive in the identification of any crisis related issues within the organization and recommend methods to monitor, evaluate, and/or resolve identified issues.
• Support in the efforts of our vendor risk management program, including, but not limited to the assessment of, and follow up of governance documentation related to, vendor risk. 
• Ensure vendor relationships are appropriately managed based on the risk they pose to Outreach and nature of their own business continuity programs.
• Create/Manage governance documentation related to TPRM, BC, and Crisis Management 
• Ad hoc duties supporting the team, as needed. 

Qualifications:

• 5+ years of building and managing business continuity, third party, and enterprise risk management
• Bachelor’s degree. 
• Ability to work well within a team atmosphere as well as independently to achieve results within the dynamic Outreach culture. 
• Experience driving the development of GRC program strategies, performance metrics, and articulating the business value and costs. 
• Experience in establishing and maintaining compliance within an ever-evolving environment. 
• Ability to work effectively, independently, and collaboratively, with an ability to develop positive relationships.
• Ability to engage effectively with key stakeholders, including senior management and executives
• Experience with a Vendor Risk Management Program in the assessment of vendor risk through due diligence questionnaires and ongoing risk reviews.
• Familiarity with SOC 1, SOC 2, HIPAA, and GDPR 
• Strong attention to detail 
• Excellent interpersonal and time management skills. 
• Strong written and verbal communication skills, including strong executive presentation material creation ability.
• Problem solving skills and ability to work under pressure. 
• Ability to maintain extreme confidentiality. 
• Willingness to take on additional responsibilities, as needed. 

Good to have:

• A proficient knowledge of computer skills, including but not limited to Microsoft Office 
• Past experience successfully building out Emergency Notification Systems 
• Ability to manage multiple tasks simultaneously or in close succession.
• Experience authoring and management of policies and standards, technical writing 
• Experience managing a risk program including the collection and identification of risks and risk treatment plans. 
• Strong program management experience. 
• Have a history of successful cross-organizational efforts. 
• Ability to analyze problems and make appropriate decisions quickly.
• Ability to drive large, complex projects and create solutions. 
• Experience managing multiple external vendors across broad and complex work engagements.
• A solid understanding of ESG and its role in vendor risk management 
• Business Continuity certifications (such as CBCP, MBCP, CBCI, CBCA, etc) or other governance and compliance certifications are also acceptable.