GRC & Tech Risk Governance Manager

VACA Vaca Industries, Inc.; United States; Remote; USD 90,000 - 130,000; Full time

Job summary

Pinnacle Group is seeking a qualified risk management professional to own and manage the third-party risk program. You will partner with Information Security, Legal, Compliance, IT, and business stakeholders to identify, assess, document, and mitigate technology, cybersecurity, privacy, AI, and vendor risks.

You will review SOC 1/2, ISO 27001, penetration testing reports, DR/BC documentation, and related compliance materials while coordinating with third-party auditors and internal teams to

Qualifications

• Bachelor's degree or higher in a related field.
• Experience in technology risk, governance, and vendor management.
• Experience with SaaS, cloud providers, MSPs, or AI-enabled products.

Responsibilities

• Own and manage the third-party risk management program end-to-end.
• Partner with security, legal, compliance, IT, and business teams to assess and mitigate risks.
• Review SOC 1/2, ISO 27001, penetration tests, DR/BC docs, and privacy materials.
• Interface with auditors, vendors, and stakeholders to gather documentation.
• Maintain risk records, dashboards, and governance materials for leadership.

Skills

Vendor risk assessments

IS0 27001

SOC 2 readiness

NIST/CIS controls

Audits & questionnaires

Education

Bachelor's degree in Business Information Systems, Cybersecurity, Risk Management

Tools

Drata

Job description

Pinnacle Group is seeking a qualified risk management professional to own and manage the third-party risk program. You will partner with Information Security, Legal, Compliance, IT, and business stakeholders to identify, assess, document, and mitigate technology, cybersecurity, privacy, AI, and vendor risks.

You will review SOC 1/2, ISO 27001, penetration testing reports, DR/BC documentation, and related compliance materials while coordinating with third-party auditors and internal teams to