Risk Specialist (Third Party IT Assessment)

**Job Description:**

As a Risk Specialist at Pinnacle Group, your main responsibilities will include:

• Performing third-party risk assessments and vendor assessments focusing on technology, security, and IT control environments.
• Evaluating vendor risk posture by reviewing documentation, controls, processes, and responses to security and compliance questionnaires.
• Supporting the organization's third-party risk management program by identifying gaps, documenting findings, and recommending remediation actions.
• Interfacing with third-party auditors, vendors, and internal stakeholders to gather information and respond to assessment requests.
• Reviewing and interpreting ISO, SOC, and related compliance documentation to assess alignment with organizational risk requirements.
• Assisting in responding to third-party questionnaires on behalf of the client, ensuring accurate, complete, and professionally documented responses.
• Maintaining organized assessment records, supporting materials, and risk documentation in accordance with internal policies and procedures.
• Collaborating with cross-functional teams to enhance risk assessment processes, strengthen vendor oversight, and support audit readiness.
• Demonstrating the potential to take on increasing responsibility and grow into a future leadership role within the risk function.
• *Qualifications Required:**

To be successful in this role, you should have:

• Experience performing IT assessments from a risk perspective, particularly related to third-party risk management and technology vendor assessments.
• Strong knowledge of ISO and SOC frameworks, reports, controls, and related compliance expectations.
• Experience in interfacing with third-party auditors and responding to third-party risk or security questionnaires.
• Ability to assess technology vendors, identify risk concerns, document findings, and communicate recommendations clearly.
• Strong written and verbal communication skills, with the capability to work effectively with auditors, vendors, and internal stakeholders.
• Demonstrated potential to grow into a leadership role, including an ownership mindset, sound judgment, and the ability to influence process improvements.
• Preferred experience with SaaS environments and AI-driven assessment processes.
• Preferred experience using Drata or similar compliance and risk management platforms.

In this role, you will have the opportunity to contribute to a growing risk and compliance function at Pinnacle Group. Your expertise in IT assessments, vendor risk, and compliance frameworks will directly support business resilience and audit readiness. Pinnacle Group values proactive, detail-oriented professionals who are eager to expand their leadership responsibilities. **Job Description:**

As a Risk Specialist at Pinnacle Group, your main responsibilities will include:

• Performing third-party risk assessments and vendor assessments focusing on technology, security, and IT control environments.
• Evaluating vendor risk posture by reviewing documentation, controls, processes, and responses to security and compliance questionnaires.
• Supporting the organization's third-party risk management program by identifying gaps, documenting findings, and recommending remediation actions.
• Interfacing with third-party auditors, vendors, and internal stakeholders to gather information and respond to assessment requests.
• Reviewing and interpreting ISO, SOC, and related compliance documentation to assess alignment with organizational risk requirements.
• Assisting in responding to third-party questionnaires on behalf of the client, ensuring accurate, complete, and professionally documented responses.
• Maintaining organized assessment records, supporting materials, and risk documentation in accordance with internal policies and procedures.
• Collaborating with cross-functional teams to enhance risk assessment processes, strengthen vendor oversight, and support audit readiness.
• Demonstrating the potential to take on increasing responsibility and grow into a future leadership role within the risk function.
• *Qualifications Required:**

To be successful in this role, you should have:

• Experience performing IT assessments from a risk perspective, particularly related to third-party risk management and technology vendor assessments.
• Strong knowledge of ISO and SOC frameworks, reports, controls, and related compliance expectations.
• Experience in interfacing with third-party auditors and responding to third-party risk or security questionnaires.
• Ability to assess technology vendors, identify risk concerns, document findings, and communicate recommendations clearly.
• Strong written and verbal communication skills, with the capability to work effectively with auditors, vendors, and internal stakeholders.
• Demonstrated potential to grow into a leadership role, including an ownership mindset, sound judgment, and the ability to influence process improvements.

-