Risk Manager

You have:

Demonstrable experience leading information security risk assessments and treatment programmes in a complex, technology-led organisation.

Experience with and understanding of recognised compliance frameworks and standards such as ISO 27001, SOC 2, ISO 27017, ISO 27018, NIST, HIPAA, or similar, and their relationship with enterprise risk.

Strong understanding of security and technology risks across systems, networks, applications, cloud services, identity platforms, and business processes.

Experience working with cloud environments such as AWS, GCP, or Azure and the ability to translate technical issues into business risk.

Experience with risk registers, risk acceptance, exception management, remediation tracking, control validation, and residual-risk reporting.

Experience working with internal and external auditors, control owners, executive stakeholders, and cross-functional delivery teams.

Experience with third-party or supplier risk management, including due diligence, contractual risk considerations, and ongoing oversight.

Strong written and verbal communication skills, with the ability to tailor risk narratives for technical teams, auditors, executives, customers, and other stakeholders.

Strong judgement, prioritisation, analytical thinking, and problem-solving skills, especially in ambiguous or cross-functional situations.

The ability to challenge constructively, influence without direct authority, and build trust while maintaining appropriate risk discipline.

Experience using metrics, data, and operational reporting to improve risk visibility and programme effectiveness.

Experience developing enterprise risk reporting, key risk indicators, risk appetite statements, or risk committee materials.

Experience leading customer assurance or security questionnaire programmes.

Experience with GRC, risk, audit, or compliance platforms and workflow automation.

Experience improving risk assessment, evidence collection, control testing, or reporting through automation.

Experience working in a SaaS, cloud, identity, or software development environment.

Relevant certifications such as CISSP, CISM, CISA, CRISC, CGEIT, ISO 27001 Lead Implementer, or ISO 27001 Lead Auditor.

Experience partnering closely with Legal, Sales, Privacy, Engineering, Product, Finance, and Procurement on security and compliance risks.

Life at Ping:

We believe in and facilitate a flexible, collaborative work environment. We’re growing quickly, but remain true to the innovative, can-do startup values that got us here. Most importantly, we keep hiring talented, smart, fun, and genuinely nice people because that’s who we want to succeed with every day.

Here are just a few of the things that make Ping special:

A company culture that empowers you to do your best work.

Employee Resource Groups that create a sense of belonging for everyone.

Regular company and team bonding events.

Competitive benefits and perks.

Global volunteering and community initiatives

Our Benefits:

Generous PTO & Holiday Schedule

Parental Leave

Progressive Healthcare Options

Retirement Programs

Opportunity for Education Reimbursement

Commuter Offset (Specific locations)

Ping is the collective sum of all our individual experiences, backgrounds and influences and we pride ourselves in growing and learning together. We are committed to building an inclusive and diverse environment where everyone’s individuality is respected and everyone has an Identity. In recruiting for new colleagues, we welcome the unique contributions you can bring and encourage you to be your best self.

We are an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex including sexual orientation and gender identity, national origin, disability, protected Veteran Status, or any other characteristic protected by applicable federal, state, or local law.