Senior GRC Analyst
Ping Identity · USA - Remote
About the role
A senior analyst on Ping Identity's governance, risk and compliance team, reporting to the GRC Manager and working remotely in the US. The analyst runs enterprise and product risk assessments, supports ISO 27001 and SOC 2 audits with evidence, walkthroughs and auditor coordination, maintains security policies and standards, tests whether controls are designed and working as intended, and operates the third-party risk programme for critical suppliers.
The role reports compliance metrics and remediation progress to security leadership and works with engineering, privacy, legal and people teams. It asks for hands-on ISO 27001 and SOC 2 audit experience, structured risk assessment, control testing in cloud environments, and supplier assurance; CISM or CISSP is desirable.