Назад
Company hidden
23 часа назад

Senior GRC Analyst (Cybersecurity)

115 000 - 159 000$
Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior GRC Analyst (Cybersecurity): Supporting Ping Identity’s global governance, risk, and compliance programme across risk assessments, policy governance, audit support, control testing, and third-party risk oversight with an accent on ISO 27001, SOC 2, cloud compliance, and security assurance. Focus on conducting enterprise and product-level assessments, validating control effectiveness, coordinating audits, and driving cross-functional remediation.

Location: Remote, based in the United States

Base hiring range: $115,000–$159,000 per year

Company

Ping Identity provides an intelligent cloud identity platform focused on secure digital experiences, cybersecurity, and identity and access management for large enterprises worldwide.

What you will do

  • Own and support key components of the global governance, risk, and compliance programme across ISO 27001, SOC 2, and applicable regulatory and contractual obligations.
  • Lead enterprise and product-level risk assessments, identify security and compliance risks, and track remediation.
  • Support ISO 27001 and SOC 2 audits through evidence collection, control walkthroughs, and auditor coordination.
  • Develop, review, and maintain security policies, standards, and procedures.
  • Test control design and operating effectiveness, identify gaps, and drive remediation plans.
  • Operate and improve third-party risk management, compliance reporting, governance collaboration, and GRC process and tooling improvements.

Requirements

  • Hands-on experience supporting ISO 27001 and SOC 2 audits, including evidence gathering, control documentation, and auditor engagement.
  • Strong understanding of risk management principles, including structured risk assessments and remediation activities.
  • Experience reviewing and testing security controls across corporate and cloud-based environments.
  • Working knowledge of AWS, Azure, or GCP and compliance requirements in cloud-native environments.
  • Familiarity with third-party risk management and supplier assurance activities.
  • Strong communication skills for translating regulatory and technical requirements into practical guidance for business stakeholders.
  • Excellent organisational skills and the ability to manage multiple audits, assessments, and projects concurrently.

Nice to have

  • Relevant professional certification such as CISM, CISSP, or equivalent.

Culture & Benefits

  • Flexible, collaborative, remote work environment.
  • Inclusive culture with Employee Resource Groups and an emphasis on individuality and belonging.
  • Regular company and team bonding events, volunteering, and community initiatives.
  • Generous paid time off and holiday schedule.
  • Parental leave, progressive healthcare options, retirement programmes, education reimbursement, and commuter offset for specific locations.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →