GRC Manager, Tech Risk & AI Governance

Pinnacle Group, Inc.; Dallas (TX); On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

401K Contributions

Paid Time Off

Job summary

Pinnacle Group is seeking a GRC Manager – Technology Risk & Governance to own and mature governance, risk, and compliance programs. You will lead third-party risk management, oversee ISO 27001 and SOC 2 compliance in partnership with IT, and collaborate on AI risk governance across the organization.

The role requires strong experience in technology risk, vendor assessments, and security frameworks, with the ability to influence stakeholders and drive risk initiatives at scale.

Qualifications

• Bachelor’s degree in a related field.
• Experience in technology risk, governance, compliance, or a related discipline.
• Vendor risk assessments for SaaS platforms, cloud providers, MSPs, software vendors, and AI-enabled products.
• Working knowledge of ISO 27001, SOC standards, NIST, CIS Controls, and related governance practices.
• Ability to communicate findings clearly to technical and non-technical stakeholders.

Responsibilities

• Own and manage third-party risk management program across vendor lifecycle.
• Partner with security, legal, compliance, IT, and business stakeholders to assess and mitigate risks.
• Review SOC 1/2, ISO 27001, penetration tests, BCP/DR, privacy materials, and evidence.
• Interface with auditors, vendors, and stakeholders to respond to assessment requests.
• Support responses to third-party questionnaires with accurate, complete documentation.
• Maintain organized risk and compliance records per internal policies.
• Prepare risk summaries, dashboards, and governance materials for leadership.
• Maintain ISO 27001 certification and SOC 2 readiness with IT teams.
• Collaborate on AI risk governance standards and procedures.
• Enhance business continuity plans with cross-functional input.

Skills

Technology risk

Governance

Compliance

Vendor risk assessments

Audit support

Communication skills

AI risk governance

Education

Bachelor’s degree in Business Information Systems, Cybersecurity, Risk Management, Compliance, or a related field

Tools

Drata

Job description

Pinnacle Group is seeking a GRC Manager – Technology Risk & Governance to own and mature governance, risk, and compliance programs. You will lead third-party risk management, oversee ISO 27001 and SOC 2 compliance in partnership with IT, and collaborate on AI risk governance across the organization.

The role requires strong experience in technology risk, vendor assessments, and security frameworks, with the ability to influence stakeholders and drive risk initiatives at scale.