azureawsgcprisk managementcybersecuritygrciso 27001soc 2security controlsthird party risk management
Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
$115к-159к/год
$140к$150кмедиана$180к
По похожим ролям (49) ~ $150к/год
На СНГ рынке: $6.7к/мес ($3.6к - $12к)
86
Хорошая вакансия
развернуть
Чётко очерченная senior-позиция в GRC у известной компании в сфере кибербезопасности с ответственностью за аудиты, риски и контрольные меры; подробное описание и перечисленные льготы помогают оценить условия.
Кликните для подробной информации
Понятные задачиКибербезопасностьПакет льгот
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Senior GRC Analyst (Cybersecurity): Supporting Ping Identity’s global governance, risk, and compliance programme across risk assessments, policy governance, audit support, control testing, and third-party risk oversight with an accent on ISO 27001, SOC 2, cloud compliance, and security assurance. Focus on conducting enterprise and product-level assessments, validating control effectiveness, coordinating audits, and driving cross-functional remediation.
Location: Remote, based in the United States
Base hiring range: $115,000–$159,000 per year
Company
Ping Identity provides an intelligent cloud identity platform focused on secure digital experiences, cybersecurity, and identity and access management for large enterprises worldwide.
What you will do
Own and support key components of the global governance, risk, and compliance programme across ISO 27001, SOC 2, and applicable regulatory and contractual obligations.
Lead enterprise and product-level risk assessments, identify security and compliance risks, and track remediation.
Support ISO 27001 and SOC 2 audits through evidence collection, control walkthroughs, and auditor coordination.
Develop, review, and maintain security policies, standards, and procedures.
Test control design and operating effectiveness, identify gaps, and drive remediation plans.
Operate and improve third-party risk management, compliance reporting, governance collaboration, and GRC process and tooling improvements.
Requirements
Hands-on experience supporting ISO 27001 and SOC 2 audits, including evidence gathering, control documentation, and auditor engagement.
Strong understanding of risk management principles, including structured risk assessments and remediation activities.
Experience reviewing and testing security controls across corporate and cloud-based environments.
Working knowledge of AWS, Azure, or GCP and compliance requirements in cloud-native environments.
Familiarity with third-party risk management and supplier assurance activities.
Strong communication skills for translating regulatory and technical requirements into practical guidance for business stakeholders.
Excellent organisational skills and the ability to manage multiple audits, assessments, and projects concurrently.
Nice to have
Relevant professional certification such as CISM, CISSP, or equivalent.
Culture & Benefits
Flexible, collaborative, remote work environment.
Inclusive culture with Employee Resource Groups and an emphasis on individuality and belonging.
Regular company and team bonding events, volunteering, and community initiatives.
Generous paid time off and holiday schedule.
Parental leave, progressive healthcare options, retirement programmes, education reimbursement, and commuter offset for specific locations.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →