Risk Specialist

Role Overview:

Pinnacle Group is looking for a Risk Specialist to focus on third-party IT risk management and technology vendor assessment activities. Your role will involve evaluating technology vendors from an IT risk perspective, supporting audit readiness, and ensuring alignment with security, compliance, and governance standards. The ideal candidate should have a strong understanding of ISO and SOC frameworks, experience with third-party auditors, and the potential to grow into a leadership position in the future.

Key Responsibilities:

• Perform third-party risk assessments and vendor assessments related to technology, security, and IT control environments.
• Evaluate vendor risk posture by examining documentation, controls, processes, and responses to security and compliance questionnaires.
• Support the organization's third-party risk management program by identifying gaps, documenting findings, and suggesting remediation actions.
• Communicate with third-party auditors, vendors, and internal stakeholders to collect information and address assessment requests.
• Review and analyze ISO, SOC, and other compliance documentation to ensure alignment with organizational risk requirements.
• Assist in responding to third-party questionnaires on behalf of the client, ensuring accuracy, completeness, and professional documentation.
• Maintain organized assessment records, supporting materials, and risk documentation according to internal policies and procedures.
• Collaborate with cross-functional teams to enhance risk assessment processes, reinforce vendor oversight, and prepare for audits.
• Demonstrate the potential to take on more responsibility and evolve into a leadership role within the risk function.

Qualifications Required:

• Experience in conducting IT assessments focusing on third-party risk management and technology vendor assessments.
• Proficiency in ISO and SOC frameworks, reports, controls, and related compliance expectations.
• Ability to interact with third-party auditors and respond to third-party risk or security questionnaires.
• Skill in assessing technology vendors, identifying risk issues, documenting findings, and conveying recommendations clearly.
• Strong written and verbal communication abilities to collaborate effectively with auditors, vendors, and internal stakeholders.
• Demonstrated potential for leadership, including an ownership mindset, good judgment, and the capacity to influence process enhancements.
• Preferred experience in SaaS environments and AI-driven assessment processes.
• Preferred familiarity with Drata or similar compliance and risk management platforms. Role Overview:

Pinnacle Group is looking for a Risk Specialist to focus on third-party IT risk management and technology vendor assessment activities. Your role will involve evaluating technology vendors from an IT risk perspective, supporting audit readiness, and ensuring alignment with security, compliance, and governance standards. The ideal candidate should have a strong understanding of ISO and SOC frameworks, experience with third-party auditors, and the potential to grow into a leadership position in the future.

Key Responsibilities:

• Perform third-party risk assessments and vendor assessments related to technology, security, and IT control environments.
• Evaluate vendor risk posture by examining documentation, controls, processes, and responses to security and compliance questionnaires.
• Support the organization's third-party risk management program by identifying gaps, documenting findings, and suggesting remediation actions.
• Communicate with third-party auditors, vendors, and internal stakeholders to collect information and address assessment requests.
• Review and analyze ISO, SOC, and other compliance documentation to ensure alignment with organizational risk requirements.
• Assist in responding to third-party questionnaires on behalf of the client, ensuring accuracy, completeness, and professional documentation.
• Maintain organized assessment records, supporting materials, and risk documentation according to internal policies and procedures.
• Collaborate with cross-functional teams to enhance risk assessment processes, reinforce vendor oversight, and prepare for audits.
• Demonstrate the potential to take on more responsibility and evolve into a leadership role within the risk function.

Qualifications Required:

• Experience in conducting IT assessments focusing on third-party risk management and technology vendor assessments.
• Proficiency in ISO and SOC frameworks, reports, controls, and related compliance expectations.
• Ability to interact with third-party auditors and respond to third-party risk or security questionnaires.
• Skill in assessing technology vendors, identifying risk issues, documenting findings, and conveying recommendations clearly.
• Strong written and verbal communication abilities to collaborate effectively with auditors, vendors, and internal stakeholders.
• Demons