GRC Manager – Technology Risk, Governance

🔥 12 hours ago

🇺🇸 United States – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🚔 Compliance

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Pinnacle Group, Inc.

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

🏢 Enterprise

👥 HR Tech

🤝 B2B

Enterprise • HR Tech • B2B

Pinnacle Group, Inc. is a leading provider of contingent workforce solutions, specializing in Managed Services (MSP), Vendor Management Software (VMS) implementation, and payrolling services. As a diversity-driven, VMS-agnostic service provider, Pinnacle Group delivers scalable workforce solutions globally, ensuring cost savings, attrition reduction, and compliance for its clients. With a strong focus on strategic services, Pinnacle has partnered with Fortune 500 companies to optimize their workforce management, achieving 100% supplier payment accuracy. The company is Latina-owned and is recognized for its commitment to supplier diversity and innovative workforce strategies.

📋 Description

• Own and manage the third-party risk management program, including risk-based vendor assessments, onboarding reviews, and periodic evaluations throughout the vendor lifecycle. • Partner with Information Security, Legal, Compliance, IT, and business stakeholders to identify, assess, document, and mitigate technology, cybersecurity, privacy, AI, and vendor-related risks. • Review SOC 1 and SOC 2 reports, ISO 27001 certifications, penetration testing reports, business continuity plans, disaster recovery documentation, privacy materials, and related compliance evidence. • Interface with third-party auditors, vendors, and internal stakeholders to gather documentation, respond to assessment requests, and support audit readiness. • Support responses to technology-related third-party questionnaires, ensuring information is accurate, complete, consistent, and professionally documented. • Maintain organized assessment records, risk documentation, compliance evidence, and supporting materials in accordance with internal policies and procedures. • Prepare risk summaries, dashboards, reports, and governance materials for leadership and committee review. • Maintain and support Pinnacle Group’s ISO 27001 certification and SOC 2 compliance in partnership with IT and other key stakeholders. • Collaborate with cross-functional teams to create, maintain, and implement AI-related standards, procedures, and risk governance practices. • Enhance and maintain Pinnacle Group’s business continuity plan in collaboration with appropriate business and technology stakeholders.

🎯 Requirements

• Bachelor’s degree in Business Information Systems, Cybersecurity, Risk Management, Compliance, or a related field. • Experience in technology risk, governance, compliance, information security, audit, third-party risk management, or a related discipline. • Strong experience performing vendor risk assessments for SaaS platforms, cloud providers, managed service providers, software vendors, and AI-enabled products. • Working knowledge of ISO 27001, SOC standards, NIST, CIS Controls, and related governance practices. • Experience interfacing with third-party auditors and responding to security, risk, compliance, or vendor assessment questionnaires. • Ability to assess technology vendors, identify risk concerns, document findings, and communicate recommendations clearly to technical and non-technical stakeholders. • Strong written and verbal communication skills with the ability to collaborate effectively across auditors, vendors, IT, Legal, Compliance, and business teams. • Experience using Drata or similar governance, risk, and compliance platforms preferred. • Working knowledge of AI-related risks, controls, governance standards, and emerging compliance considerations preferred.