Senior GRC Analyst (Remote) - ISO 27001 & SOC 2 Focus

Ping Identity; United States; Remote; USD 115,000 - 159,000; Full time

Benefits offered by this job

Generous PTO

Parental Leave

Progressive Healthcare Options

Retirement Programs

Education Reimbursement

Commuter Offset

Job summary

Ping Identity seeks a Senior GRC Analyst to drive Ping Identity's global governance, risk, and compliance programme. This full-time, remote role is based in the United States and reports to the GRC Manager.

You will guide risk assessments, support audits, and embed security controls across engineering, product, privacy, legal, and other teams. Ideal candidates have hands-on ISO 27001 and SOC 2 experience, cloud platform knowledge (AWS/Azure/GCP), and strong communication skills to translate

Qualifications

• Hands-on experience supporting ISO 27001 and SOC 2 audits, including evidence gathering and auditor engagement.
• Strong understanding of risk management principles and structured risk assessments.
• Experience reviewing and testing security controls across corporate and cloud environments.
• Knowledge of cloud platforms (AWS, Azure or GCP) and cloud compliance requirements.
• Familiarity with third-party risk management processes.

Responsibilities

• Own and drive Ping Identity's GRC programme components, ensuring alignment with ISO 27001, SOC 2 and obligations.
• Lead risk assessments enterprise- and product-level, track remediation with stakeholders.
• Support external audits and certifications, including evidence collection and auditor coordination.
• Develop, review and maintain security policies, standards and procedures.
• Perform assurance activities to validate control design and effectiveness and drive remediation.
• Manage third-party risk program including supplier due diligence and monitoring.
• Track and report compliance metrics, audit findings and risk trends to leadership.
• Collaborate with Engineering, Product, Privacy, Legal and People teams to embed requirements.

Skills

ISO 27001

SOC 2

Risk assessment

Audit support

Policy governance

Third‑party risk

Cloud security

Communication

Job description

Ping Identity seeks a Senior GRC Analyst to drive Ping Identity's global governance, risk, and compliance programme. This full-time, remote role is based in the United States and reports to the GRC Manager.

You will guide risk assessments, support audits, and embed security controls across engineering, product, privacy, legal, and other teams. Ideal candidates have hands-on ISO 27001 and SOC 2 experience, cloud platform knowledge (AWS/Azure/GCP), and strong communication skills to translate