Senior GRC Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Take ownership of essential elements within Ping Identity’s global governance, risk, and compliance (GRC) program, ensuring it aligns with ISO 27001, SOC 2, and other relevant regulatory and contractual requirements.

• Lead and perform risk assessments at both the enterprise and product levels, collaborating with stakeholders to identify, evaluate, and monitor the remediation of security and compliance risks.

• Assist with external audits and certifications, including gathering evidence, conducting control walkthroughs, and coordinating with auditors.

• Create, review, and maintain security policies, standards, and procedures.

• Execute assurance activities to verify control design and operational effectiveness, pinpointing gaps and driving plans for remediation.

• Manage and enhance the third-party risk management program, which includes conducting supplier risk assessments, due diligence reviews, and ongoing monitoring of critical vendors.

• Monitor and report on compliance metrics, audit results, risk trends, and remediation efforts to Information Security leadership and relevant governance committees.

• Collaborate with Engineering, Product, Privacy, Legal, People Team, and other business units to integrate security and compliance requirements into processes and initiatives.

• Support continuous improvement efforts across the GRC function, aiding in process streamlining, tool enhancement, and improved reporting and visibility.

⛳️ Requirements

• Practical experience in supporting ISO 27001 and SOC 2 audits, including evidence collection, control documentation, and interaction with auditors.

• Strong grasp of risk management principles and experience in executing structured risk assessments and facilitating remediation activities.

• Background in reviewing and testing security controls across both corporate and cloud-based environments.

• Familiarity with cloud platforms (e.g., AWS, Azure, or GCP) and understanding how compliance requirements apply in cloud-native settings.

• Knowledge of third-party risk management processes and supplier assurance activities.

• Excellent communication skills, with the capability to translate regulatory and technical requirements into clear, actionable guidance for business stakeholders.

• Outstanding organizational skills, with the ability to manage multiple audits, assessments, and projects simultaneously.

• Relevant professional certifications such as CISM, CISSP, or equivalent are preferred.

🏝️ Benefits

• A company culture that empowers you to perform at your best.

• Employee Resource Groups that foster a sense of belonging for all.

• Regular team-building and company events.

• Competitive benefits and perks package.

• Opportunities for global volunteering and participation in community initiatives.

• Generous paid time off and holiday schedule.

• Parental leave policy.

• Progressive healthcare options available.

• Retirement programs to support your future.

• Educational reimbursement opportunities.

• Commuter offset benefits available in specific locations.