Enterprise Risk Manager - InfoSec & GRC

Ping Identity; Denver (CO); On-site; GBP 65,000 - 95,000; Full time

Benefits offered by this job

Generous PTO

Parental Leave

Healthcare options

Retirement programs

Education reimbursement

Commuter offset

Job summary

Ping Identity is seeking a Risk Manager to lead the identification, assessment, treatment, monitoring, and reporting of information security and business risks across the organisation. You will align risk decisions with company objectives and customer trust commitments.

You will partner with stakeholders across Security, Engineering, Legal, Privacy, People, Sales, and Finance to maintain Ping Identity’s risk management practices and governance, ensuring scalable and measurable risk management.

Qualifications

• Experience leading information security risk assessments and treatment programmes.
• Familiarity with ISO 27001, SOC 2, NIST, and similar frameworks.
• Ability to assess security risks across cloud, networks, and applications.

Responsibilities

• Manage information security risk lifecycle end-to-end across the organisation.
• Lead risk assessments for enterprise, business-unit, project, and third-party risk.
• Maintain risk registers, treatment plans, escalation paths, and governance records.
• Define risk appetite, KRIs, and management reporting for leaders.

Skills

Risk assessments

ISO 27001

SOC 2

NIST

Cloud risk management

Audits & assurance

GRC platforms

Stakeholder engagement

Data-driven reporting

Regulatory knowledge

Tools

GRC platforms

Job description

Ping Identity is seeking a Risk Manager to lead the identification, assessment, treatment, monitoring, and reporting of information security and business risks across the organisation. You will align risk decisions with company objectives and customer trust commitments.

You will partner with stakeholders across Security, Engineering, Legal, Privacy, People, Sales, and Finance to maintain Ping Identity’s risk management practices and governance, ensuring scalable and measurable risk management.