Risk Manager

Ping Identity

. Lead the identification, assessment, treatment, monitoring, and reporting of information security and business risks across Ping Identity .

Posted 9/15/2026full-timeRemote • United KingdomMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in leading information security risk assessments and treatment programs, with a strong understanding of compliance frameworks such as ISO 27001 and NIST. Capable of translating technical issues into business risks while effectively communicating with stakeholders and improving risk management processes.

Highest-signal resume keywords

Information Security Risk AssessmentCompliance Frameworks (ISO 27001, NIST)Third-Party Risk ManagementRisk Registers and ReportingCloud Services (AWS, GCP, Azure)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk AssessmentRisk Treatment ProgramsControl ValidationRemediation TrackingRisk AcceptanceAnalytical ThinkingOperational ReportingMetrics AnalysisGovernance Records ManagementBusiness Process Risk Management

Soft Skills

Strong Communication SkillsJudgementPrioritisationProblem-SolvingInfluencing Without Authority

Industry Keywords

ISMSBCMSAIMSGRCCustomer AssuranceAudit ReadinessSecurity QuestionnairesSupplier Risk ActivitiesEscalation ProcessesControl Environment

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud Platform

About the role

Key responsibilities & impact

Lead the identification, assessment, treatment, monitoring, and reporting of information security and business risks across Ping Identity
Partner with Enterprise Security, Engineering, Product, Legal, Privacy, People Team, Sales, Customer Success, and Finance stakeholders
Connect enterprise risk management with the ISMS, BCMS, AIMS, control environment, customer assurance capability, and audit readiness
Run enterprise, business-unit, project, technology, and third-party risk assessments
Maintain risk registers, risk statements, treatment plans, action owners, due dates, and escalation paths
Define and monitor risk appetite, tolerance indicators, key risk indicators, and management reporting
Advise senior leaders and control owners on risk acceptance, mitigation, compensating controls, residual risk, and escalation
Improve control design, evidence quality, remediation effectiveness, and connections between controls and material risks
Maintain and improve ISMS, BCMS, and AIMS risk components, including policies, standards, procedures, methodologies, mappings, and governance records
Coordinate risk-related inputs to audits, customer assurance activities, regulatory requests, and security questionnaires
Oversee third-party and supplier risk activities
Establish governance routines, workflows, playbooks, service levels, and escalation processes
Track remediation and risk treatment commitments and report on trends, dependencies, and residual exposure
Use operational data and metrics to identify systemic issues and improve programme performance
Act as an escalation point for complex or ambiguous risk matters
Contribute to GRC and Information Security team capability through coaching, knowledge sharing, and continuous improvement

Requirements

What you’ll need

Demonstrable experience leading information security risk assessments and treatment programmes in a complex, technology-led organisation
Experience with recognised compliance frameworks and standards such as ISO 27001, SOC 2, ISO 27017, ISO 27018, NIST, HIPAA, or similar
Strong understanding of security and technology risks across systems, networks, applications, cloud services, identity platforms, and business processes
Experience with AWS, GCP, or Azure and ability to translate technical issues into business risk
Experience with risk registers, risk acceptance, exception management, remediation tracking, control validation, and residual-risk reporting
Experience working with internal and external auditors, control owners, executive stakeholders, and cross-functional delivery teams
Experience with third-party or supplier risk management, including due diligence, contractual risk considerations, and ongoing oversight
Strong written and verbal communication skills
Strong judgement, prioritisation, analytical thinking, and problem-solving skills
Ability to challenge constructively, influence without direct authority, and build trust while maintaining appropriate risk discipline
Experience using metrics, data, and operational reporting to improve risk visibility and programme effectiveness

Benefits

Comp & perks

Flexible, collaborative work environment
Company culture that empowers employees to do their best work
Employee Resource Groups
Regular company and team bonding events
Competitive benefits and perks
Global volunteering and community initiatives
Generous PTO & Holiday Schedule
Parental Leave
Progressive Healthcare Options
Retirement Programs
Opportunity for Education Reimbursement
Commuter Offset (Specific locations)