Senior GRC Analyst: ISO 27001 & SOC 2 Expert (Remote)

Ping Identity; Denver (CO); Hybrid; USD 115,000 - 159,000; Full time

Job summary

Ping Identity is seeking a Senior GRC Analyst to lead governance, risk, and compliance efforts. You will drive risk assessments, policy governance, and audit support across cloud and on-premises environments, coordinating with cross-functional teams to strengthen our security posture.

You will collaborate with Engineering, Privacy, Legal, and People teams to embed security and regulatory requirements, while reporting metrics to senior leadership.

Qualifications

• Hands-on experience supporting ISO 27001 and SOC 2 audits, including evidence gathering and auditor engagement.
• Strong understanding of risk management principles and structured risk assessments.
• Experience testing security controls across corporate and cloud environments.
• Familiarity with cloud platforms and cloud-native compliance requirements.
• Ability to translate regulatory and technical requirements into practical guidance.

Responsibilities

• Own and support key components of Ping Identity’s global GRC programme, ensuring alignment with ISO 27001, SOC 2, and other obligations.
• Lead enterprise and product-level risk assessments and track remediation with stakeholders.
• Support external audits and certifications, including evidence collection and auditor coordination.
• Develop, review, and maintain security policies, standards, and procedures.
• Perform assurance activities to validate control design and operating effectiveness.
• Operate third-party risk management, including supplier risk assessments and due diligence.
• Track and report on compliance metrics, audit findings, and remediation progress to leadership.
• Partner with Engineering, Product, Privacy, Legal, People Team to embed requirements into processes.
• Drive continuous improvement across the GRC function, enhancing tooling and reporting.

Skills

GRC management

Risk assessments

Policy governance

Audit support

Control testing

Third-party risk

Regulatory compliance

ISO 27001

SOC 2

Stakeholder collaboration

Tools

AWS

Azure

GCP

Job description

Ping Identity is seeking a Senior GRC Analyst to lead governance, risk, and compliance efforts. You will drive risk assessments, policy governance, and audit support across cloud and on-premises environments, coordinating with cross-functional teams to strengthen our security posture.

You will collaborate with Engineering, Privacy, Legal, and People teams to embed security and regulatory requirements, while reporting metrics to senior leadership.