Senior GRC Analyst
New
P
Ping IdentityCybersecurity, identity
USA - Remote; based in the United States.Full-TimeSenior
Salary115,000 - 159,000 USD per year
Apply NowOpens the employer's application page
Job Details
- Required Skills
- AWSGCPAzure
Requirements
- Hands-on experience supporting ISO 27001 and SOC 2 audits.
- Experience gathering audit evidence, documenting controls, and engaging with auditors.
- Strong understanding of risk management principles.
- Experience conducting structured risk assessments and driving remediation activities.
- Experience reviewing and testing security controls across corporate and cloud-based environments.
- Working knowledge of cloud platforms such as AWS, Azure, or GCP and compliance in cloud-native environments.
- Familiarity with third-party risk management and supplier assurance activities.
- Ability to translate regulatory and technical requirements into practical guidance for business stakeholders.
- Ability to manage multiple audits, assessments, and projects concurrently.
- CISM, CISSP, or equivalent professional certification is desirable.
Responsibilities
- Own and support components of the global GRC programme, aligning them with ISO 27001, SOC 2, and applicable regulatory and contractual obligations.
- Lead enterprise and product-level risk assessments and track remediation with stakeholders.
- Support external audits and certifications by collecting evidence, conducting control walkthroughs, and coordinating with auditors.
- Develop, review, and maintain security policies, standards, and procedures.
- Validate control design and operating effectiveness, identify gaps, and drive remediation plans.
- Operate and improve the third-party risk management programme, including supplier assessments, due diligence, and ongoing monitoring of critical vendors.
- Track and report compliance metrics, audit findings, risk trends, and remediation progress.
- Partner with Engineering, Product, Privacy, Legal, People Team, and other business units to embed security and compliance requirements.
- Improve GRC processes, tooling, reporting, and visibility.
View Full Description & ApplyYou'll be redirected to the employer's site
