Remote Senior GRC Analyst — ISO 27001 & SOC 2 Expert

Ping Identity Corporation; United States; Remote; USD 115,000 - 159,000; Full time

Benefits offered by this job

Generous PTO & Holiday Schedule

Parental Leave

Progressive Healthcare Options

Retirement Programs

Education Reimbursement

Commuter Offset (Specific locations)

Job summary

Ping Identity Corporation in the United States is seeking a Senior GRC Analyst to strengthen our global governance, risk, and compliance program. You will lead risk assessments, support audits, and develop security policies across cloud and on-prem environments.

You will coordinate with Engineering, Privacy, Legal, and People teams to embed governance and compliance controls into processes and deliver measurable risk reductions. This is a full-time remote role based in the United States.

Qualifications

• Hands-on experience supporting ISO 27001 and SOC 2 audits, including evidence gathering and auditor engagement.
• Strong understanding of risk management principles and structured risk assessments with remediation tracking.
• Experience reviewing and testing security controls across corporate and cloud environments.
• Working knowledge of cloud platforms (AWS, Azure or GCP) and cloud-native compliance in practice.
• Familiarity with third-party risk management processes and supplier assurance activities.
• Strong communication skills translating regulatory/technical requirements for business stakeholders.
• Excellent organizational skills managing multiple audits, assessments and projects.
• Relevant certifications such as CISM, CISSP or equivalent are desirable.

Responsibilities

• Own and support components of Ping Identity's GRC programme with alignment to ISO 27001 and SOC 2.
• Lead risk assessments and coordinate remediation with stakeholders.
• Support audits and certifications, including evidence collection and auditor coordination.
• Develop and maintain security policies, standards, and procedures.
• Perform assurance activities to validate control design and operation.
• Oversee third-party risk management and supplier due diligence.
• Track compliance metrics, audit findings, risk trends, and remediation progress.
• Partner with Engineering, Product, Privacy, Legal, and People teams to embed requirements into processes.
• Drive continuous improvement across the GRC function and tooling.

Skills

ISO 27001 & SOC 2 audits

Risk assessment

Control testing

Cloud platforms

Third-party risk mgmt

Stakeholder comms

Audit coordination

Tools

AWS

Azure

GCP

SOC 2 controls tooling

Job description

Ping Identity Corporation in the United States is seeking a Senior GRC Analyst to strengthen our global governance, risk, and compliance program. You will lead risk assessments, support audits, and develop security policies across cloud and on-prem environments.

You will coordinate with Engineering, Privacy, Legal, and People teams to embed governance and compliance controls into processes and deliver measurable risk reductions. This is a full-time remote role based in the United States.