Senior GRC Analyst
Ping Identity Corporation is an active enterprise identity-security company offering the Ping Identity Platform for customer, B2B, workforce, and AI-agent identity use cases.
Funding history
Investors
Projects
About Ping Identity Corporation
Ping Identity develops and operates identity and access management and identity-security products, including identity verification, identity management, authentication, authorization, threat protection, fraud prevention, and orchestration. Its offerings support multi-tenant SaaS, dedicated-tenant SaaS, self-managed software, and FedRAMP High deployments.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will support and enhance the global governance, risk, and compliance programme. You will conduct risk assessments, support audits and certifications, maintain security policies, test security controls, oversee third-party risk activities, and drive remediation. You will partner with business stakeholders to embed practical security and compliance requirements into processes and initiatives.
Requirements
- Hands-on experience supporting ISO 27001 and SOC 2 audits
- Understanding of risk management principles and experience conducting structured risk assessments
- Experience reviewing and testing security controls across corporate and cloud-based environments
- Working knowledge of AWS, Azure, or GCP and cloud-native compliance requirements
- Familiarity with third-party risk management and supplier assurance
- Ability to translate regulatory and technical requirements into practical guidance
- Ability to manage multiple audits, assessments, and projects concurrently
- CISM, CISSP, or equivalent certification is desirable
Responsibilities
- Own and support components of the global GRC programme
- Conduct enterprise and product-level risk assessments
- Track remediation of security and compliance risks
- Support external audits and certifications
- Develop, review, and maintain security policies, standards, and procedures
- Validate control design and operating effectiveness
- Drive remediation plans for control gaps
- Operate and improve the third-party risk management programme
- Track and report compliance metrics, audit findings, risk trends, and remediation progress
- Partner with business units to embed security and compliance requirements
- Support continuous improvement of GRC processes, tooling, reporting, and visibility
Benefits
- Generous PTO and holiday schedule
- Parental leave
- Healthcare options
- Retirement programs
- Education reimbursement
- Commuter offset in specific locations
- Employee Resource Groups
- Company and team bonding events
- Global volunteering and community initiatives