Remote Senior GRC & Compliance Analyst

Ping Identity; Oregon; Hybrid; USD 115,000 - 159,000; Full time

Benefits offered by this job

PTO & Holiday Schedule

Parental Leave

Progressive Healthcare Options

Retirement Programs

Education Reimbursement

Commuter Offset (Specific locations)

Job summary

Ping Identity is hiring a Senior GRC Analyst to support our global governance, risk, and compliance programme. This full-time, remote role is based in the United States and reports into the GRC Manager.

You will lead risk assessments, maintain policies, support ISO 27001 and SOC 2 audits, manage third-party risk, and drive remediation with cross-functional teams.

Strong communication and cloud security experience are essential; professional certs like CISM or CISSP are desirable.

Qualifications

• Experience supporting ISO 27001 and SOC 2 audits.
• Strong risk management and remediation planning.
• Experience testing security controls across cloud environments.
• Familiarity with third-party risk management processes.
• Excellent communication skills.

Responsibilities

• Own and support key components of Ping Identity’s global GRC programme, ensuring alignment with ISO 27001, SOC 2, and other applicable regulatory and contractual obligations.
• Lead enterprise and product-level risk assessments, coordinating remediation with stakeholders.
• Support external audits and certifications including evidence collection and auditor coordination.
• Develop, review, and maintain security policies, standards, and procedures.
• Perform assurance activities to validate control design and operating effectiveness.
• Operate and improve the third-party risk management programme, including supplier risk assessments and due diligence reviews.
• Track and report on compliance metrics, audit findings, risk trends, and remediation progress.
• Partner with Engineering, Product, Privacy, Legal, People Team, and other units to embed requirements.
• Support continuous improvement initiatives across the GRC function.

Skills

ISO 27001

SOC 2

Risk assessments

Policy governance

Third-party risk management

Cloud platforms (AWS/Azure/GCP)

Communications

Project management

Job description

Ping Identity is hiring a Senior GRC Analyst to support our global governance, risk, and compliance programme. This full-time, remote role is based in the United States and reports into the GRC Manager.

You will lead risk assessments, maintain policies, support ISO 27001 and SOC 2 audits, manage third-party risk, and drive remediation with cross-functional teams.

Strong communication and cloud security experience are essential; professional certs like CISM or CISSP are desirable.