GRC & Vendor Risk Lead: AI, Security & Compliance

pinnaclegroup; United States; Remote; USD 110,000 - 190,000; Full time

Job summary

PinnacleGroup is seeking a Vendor Risk and Compliance Leader to steer technology governance and third‑party risk across cybersecurity, privacy, AI, and regulatory programs. You’ll partner with security, legal, IT, and business teams to strengthen audit readiness and certifications.

The role focuses on overseeing vendor risk reviews, evaluating evidence from audits and tests, coordinating with vendors and auditors, and delivering governance dashboards to leadership.

Qualifications

• Bachelor’s degree in information systems, cybersecurity, risk management, compliance, or related field.
• Experience in technology risk, governance, compliance, information security, audit, or third-party risk management.
• Experience assessing technology vendors, including cloud services, software providers, managed service providers, or AI-enabled products.
• Knowledge of ISO 27001, SOC, NIST, or CIS Controls.
• Experience working with auditors and responding to risk-related questionnaires.
• Strong written and verbal communication to explain risk findings to technical and non-technical audiences.

Responsibilities

• Lead vendor risk reviews from onboarding through reassessments, tailoring evaluation to risk level.
• Review security and compliance evidence such as audit reports, certifications, penetration test results, continuity plans, and privacy materials.
• Coordinate with vendors, auditors, and internal teams to gather evidence and respond to assessment requests and questionnaires.
• Document risks, findings, mitigations, and supporting evidence in line with internal procedures.
• Prepare risk summaries, dashboards, and governance materials for leadership and committee discussions.
• Help maintain security certifications and compliance programs, develop AI risk practices, and improve business continuity planning.

Skills

Technology risk management

Governance

Compliance

Information security

Audit

Vendor risk management

Education

Bachelor’s degree in information systems or related field

Tools

Drata

Job description

PinnacleGroup is seeking a Vendor Risk and Compliance Leader to steer technology governance and third‑party risk across cybersecurity, privacy, AI, and regulatory programs. You’ll partner with security, legal, IT, and business teams to strengthen audit readiness and certifications.

The role focuses on overseeing vendor risk reviews, evaluating evidence from audits and tests, coordinating with vendors and auditors, and delivering governance dashboards to leadership.