Opportunity at
Ping IdentityRisk Manager
Ping Identity is a cybersecurity organisation that delivers a cloud identity platform enabling secure, frictionless digital interactions for major enterprises worldwide. Headquartered in Denver with global…
Career Tools
About This Role
Ping Identity is a cybersecurity organisation that delivers a cloud identity platform enabling secure, frictionless digital interactions for major enterprises worldwide. Headquartered in Denver with global operations, the company focuses on protecting digital identities while cultivating an inclusive culture that respects individuality. As a Risk Manager at Ping Identity, you will direct the evaluation, treatment, monitoring, and reporting of information security and operational risks across the company. You will ensure…
Job Description
Ping Identity is a cybersecurity organisation that delivers a cloud identity platform enabling secure, frictionless digital interactions for major enterprises worldwide. Headquartered in Denver with global operations, the company focuses on protecting digital identities while cultivating an inclusive culture that respects individuality.
As a Risk Manager at Ping Identity, you will direct the evaluation, treatment, monitoring, and reporting of information security and operational risks across the company. You will ensure that all risk management strategies align with business objectives and customer trust commitments. This position involves partnering with numerous internal departments including Enterprise Security, Engineering, Product, Legal, Privacy, Finance, Sales, and Customer Success to strengthen overall risk practices and governance.
The role connects enterprise risk management frameworks with the Information Security Management System, Business Continuity Management System, AI Management System, and audit readiness activities. You will assist leadership in understanding material risks, determining practical trade-offs, and tracking treatment plans through to resolution. The ideal candidate will combine rigorous risk oversight with practical execution, using data and metrics to improve the continuous risk management lifecycle.
Responsibilities
- Manage and improve the security risk management lifecycle encompassing identification, assessment, prioritisation, treatment, monitoring, and reporting.
- Conduct enterprise, business-unit, project, technology, and third-party risk assessments.
- Maintain up-to-date risk registers, action owners, treatment plans, and escalation procedures.
- Define and monitor key risk indicators, tolerance thresholds, and risk appetite statements.
- Advise leadership and control owners regarding risk acceptance, mitigation options, and residual exposure.
- Partner with stakeholders to optimize control design, evidence quality, and remediation effectiveness.
- Update risk components for the Information Security Management System, Business Continuity Management System, and AI Management System.
- Coordinate risk inputs for internal and external audits, customer assurance requests, and regulatory questionnaires.
- Oversee supplier and third-party risk assessments, due diligence, and issue resolution.
- Establish governance routines, workflows, and escalation processes to increase operational efficiency.
- Track remediation commitments and provide reporting on dependencies and trends.
- Act as an escalation contact for complex risk issues to help teams achieve defensible decisions.
Requirements
- Proven background leading information security risk assessment and treatment programs within a complex technology environment.
- Familiarity with compliance frameworks including ISO 27001, SOC 2, ISO 27017, ISO 27018, NIST, and HIPAA.
- Comprehensive knowledge of security risks across networks, systems, applications, cloud services, and identity platforms.
- Experience working within cloud infrastructure such as AWS, GCP, or Azure.
- Background handling risk registers, exception management, control validation, and remediation tracking.
- Direct experience interacting with auditors, executive stakeholders, and cross-functional teams.
- Familiarity with vendor risk management, including due diligence and ongoing supplier oversight.
- Exceptional written and verbal communication abilities tailored to diverse technical and non-technical audiences.
Qualifications
- Experience building enterprise risk reporting, key risk indicators, or risk committee materials.
- Background leading security questionnaire programmes or customer assurance activities.
- Familiarity with GRC, audit, or compliance platforms and workflow automation.
- Experience operating in a SaaS, cloud, identity, or software engineering environment.
- Professional certifications such as CISSP, CISM, CISA, CRISC, CGEIT, ISO 27001 Lead Implementer, or ISO 27001 Lead Auditor.
- Prior experience collaborating closely with Legal, Sales, Privacy, Engineering, Product, Finance, and Procurement teams.
Core Skills
Benefits
- Generous paid time off and holiday schedule
- Parental leave
- Progressive healthcare options
- Retirement programs
- Opportunity for education reimbursement
- Commuter offset in specific locations
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
What is the employment type for this role?
The position is full-time.
Where is this job located?
The posting states that the location is not specified, though the company is headquartered in Denver, Colorado and has offices around the globe.
Is the position remote?
The job posting indicates an on-site remote status.
What salary is offered for this role?
The salary is not specified in the job posting.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.
