Strategic Information Security Risk Manager

Ping Identity; United States; Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Generous PTO & Holiday Schedule

Parental Leave

Progressive Healthcare Options

Retirement Programs

Education Reimbursement

Commuter Offset (Specific locations)

Job summary

Ping Identity is seeking a Risk Manager to lead information security risk identification, assessment, treatment, monitoring, and reporting across the company. You will collaborate with Enterprise Security, Engineering, Legal, Privacy, and Finance to align risk management with objectives and customer trust commitments.

Focus on ISMS/BCMS/AIMS components and third-party risk oversight. You will define risk appetite, advise on mitigation options, and drive governance routines, metrics, and

Qualifications

• Experience leading information security risk assessments and treatment programmes in a complex technology-led organisation.
• Strong understanding of compliance frameworks such as ISO 27001, SOC 2, NIST, HIPAA or similar.
• Experience with cloud environments (AWS, GCP, Azure) and translating technical issues to business risk.
• Experience with risk registers, risk acceptance, remediation tracking, and residual-risk reporting.

Responsibilities

• Run and improve the information security risk management lifecycle across multiple domains.
• Conduct enterprise, business-unit, project, technology, and third-party risk assessments with clear business context.
• Maintain risk registers, treatment plans, and escalation paths to keep material risks visible.
• Define and monitor risk appetite, indicators, and governance reporting for leadership.

Skills

Risk assessments

ISO 27001

NIST

Cloud security

Audits

Vendor risk

Communication

GRC tools

Job description

Ping Identity is seeking a Risk Manager to lead information security risk identification, assessment, treatment, monitoring, and reporting across the company. You will collaborate with Enterprise Security, Engineering, Legal, Privacy, and Finance to align risk management with objectives and customer trust commitments.

Focus on ISMS/BCMS/AIMS components and third-party risk oversight. You will define risk appetite, advise on mitigation options, and drive governance routines, metrics, and