[All remote jobs](https://jobicy.com/jobs.md)[![Ping Identity logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/09/63e8d5a6-221.png)](https://jobicy.com/company/ping-identity.md)[Ping Identity](https://jobicy.com/company/ping-identity.md) # Risk Manager Review the role, location requirements, compensation details, and application process before deciding whether this opportunity fits your next career move. [Apply for this job](#job-application)[View company](https://jobicy.com/company/ping-identity.md)ShareRemote from[UK](https://jobicy.com/job-region/uk.md)SalaryUndisclosedDepartment[Cybersecurity](https://jobicy.com/categories/cybersecurity.md)EmploymentFull TimeExperienceDirectorPublished25 Oct 2026Apply before24 Nov 2026Listing views47Application actions2Application toolkit ## Make your next move. Prepare your resume, explore your fit, and draft a cover letter for this opportunity. AI Summary ## The role, at a glance. Ping Identity is seeking an information security Risk Manager to lead the full risk-management lifecycle across enterprise, technology, project, and third-party risks. The role connects risk governance with the ISMS, BCMS, AI management system, control environment, audit readiness, and customer assurance activities. It requires close collaboration with Security, Engineering, Product, Legal, Privacy, Finance, Sales, and Customer Success to translate technical exposure into business decisions. The successful candidate will maintain risk registers, define risk indicators and appetite, oversee remediation, and provide clear reporting to senior stakeholders. This is a senior individual-contributor governance role in a cloud and identity-security environment. ## Role DNA A quick view of the complexity, pace, ownership and collaboration implied by the job description. ### Job Complexity 5/5EasyHard ### Pace & Pressure 4/5RelaxedFast-paced ### Autonomy Level 5/5GuidedFull ownership ### Communication Load 5/5IndependentCollaborative AI insightThe role spans complex security, cloud, supplier, compliance, and enterprise-risk domains while requiring defensible decisions under ambiguity. It also demands influence across senior and technical stakeholders without direct authority. ## Salary analysis Estimated compensation compared with the broader US market for similar roles. Estimated job median (per year)Highly competitive$145,000US market range (per year)$125k–$165k0$181.50k AI insightThe yearly pay period is inferred from the job context; it was not explicitly stated by the employer. No employer salary is disclosed. Estimated annual market compensation is shown in USD for a senior information-security risk management role; the yearly cadence is inferred from the full-time senior professional context. ## Core skills Skills and capabilities most closely associated with this opportunity. [Information security risk management](https://jobicy.com/jobs?search_keywords=Information%20security%20risk%20management.md)[Enterprise risk management](https://jobicy.com/jobs?search_keywords=Enterprise%20risk%20management.md)[ISO 27001](https://jobicy.com/jobs?search_keywords=ISO%2027001.md)[SOC 2](https://jobicy.com/jobs?search_keywords=SOC%202.md)[NIST](https://jobicy.com/jobs?search_keywords=NIST.md)[Third-party risk management](https://jobicy.com/jobs?search_keywords=Third-party%20risk%20management.md)[Risk assessment](https://jobicy.com/jobs?search_keywords=Risk%20assessment.md)[Risk registers](https://jobicy.com/jobs?search_keywords=Risk%20registers.md)[Control validation](https://jobicy.com/jobs?search_keywords=Control%20validation.md)[Audit readiness](https://jobicy.com/jobs?search_keywords=Audit%20readiness.md)[Cloud security](https://jobicy.com/jobs?search_keywords=Cloud%20security.md)[GRC](https://jobicy.com/jobs?search_keywords=GRC.md)[Risk reporting](https://jobicy.com/jobs?search_keywords=Risk%20reporting.md)[Stakeholder management](https://jobicy.com/jobs?search_keywords=Stakeholder%20management.md)[Remediation tracking](https://jobicy.com/jobs?search_keywords=Remediation%20tracking.md) Sample interview questionsHow do you structure an information security risk assessment for a new cloud service?I begin by defining the business context, assets, data flows, stakeholders, and relevant regulatory or contractual obligations. I identify threat scenarios and control gaps, assess inherent likelihood and impact using an agreed methodology, then document treatment options, owners, due dates, and residual risk for accountable approval. How would you make a risk register useful to senior leadership rather than a static compliance artifact? I would focus on material risks, clear risk statements, ownership, trends, treatment status, dependencies, and decision points. I would pair the register with concise reporting on key risk indicators, overdue actions, residual exposure, and exceptions so leaders can prioritize resources and make informed trade-offs. Describe how you would handle a risk acceptance request from a business owner. I would verify that the risk is clearly described, evidence-based, and assessed consistently, including the effectiveness of existing compensating controls. I would explain mitigation alternatives and residual exposure, ensure the appropriate risk owner has authority to accept it, record the decision and expiry date, and monitor any associated commitments. How do ISO 27001 and SOC 2 support enterprise risk management? Both frameworks provide structured ways to identify controls, gather evidence, and demonstrate that risks are managed systematically. I use them as inputs to the broader risk program, connecting control performance and audit findings to business impact, treatment plans, and leadership reporting rather than treating compliance as a separate exercise. How would you manage third-party security risk for a critical supplier? I would assess inherent risk based on data access, service criticality, connectivity, geography, and regulatory impact, then perform due diligence on the supplier's controls and assurance evidence. Any gaps would be documented in a treatment plan with contractual safeguards, accountable owners, monitoring requirements, and escalation criteria for unresolved residual risk. Opportunity details ## About this role. About Ping Identity: At Ping Identity, we believe in making digital experiences both secure and seamless for all users, without compromise. We call this digital freedom. And it’s not just something we provide our customers. It’s something that inspires our company. People don’t come here to join a culture that’s built on digital freedom. They come to cultivate it. Our intelligent, cloud identity platform lets people shop, work, bank, and interact wherever and however they want. Without friction. Without fear. While protecting digital identities is at the core of our technology, protecting individual identities is at the core of our culture. [We champion every identity.](https://www.pingidentity.com/en/company/championing-every-identity.html) One of our core values, Respect Individuality, reminds us to celebrate differences so you are empowered to bring your authentic self to work. We’re headquartered in Denver, Colorado and we have offices and employees around the globe. We serve the largest, most demanding enterprises worldwide, including more than half of the Fortune 100. At Ping Identity, we’re changing the way people and businesses think about cybersecurity, digital experiences, and identity and access management. As Risk Manager, you will lead the identification, assessment, treatment, monitoring, and reporting of information security and business risks across Ping Identity. You will help ensure that risk decisions are consistent, evidence-based, clearly communicated, and aligned with the company’s objectives, risk appetite, and customer trust commitments. You will partner with stakeholders across Enterprise Security, Engineering, Product, Legal, Privacy, People Team, Sales, Customer Success, and Finance to maintain and continuously improve Ping Identity’s risk management practices and supporting governance. Your work will connect enterprise risk management with the Information Security Management System (ISMS), Business Continuity Management System (BCMS), AI Management System (AIMS), control environment, customer assurance capability, and audit readiness. You will balance strong risk oversight with pragmatic execution, helping the organisation understand its most material risks, make informed trade-offs, and track risk treatment through to measurable resolution. You will also contribute to a scalable operating model through clear governance routines, useful metrics, effective stakeholder engagement, and continuous improvement. ### What You’ll Do You will: * Run and continuously improve the information security risk management lifecycle, including risk identification, assessment, prioritisation, treatment, acceptance, monitoring, and reporting. * Run enterprise, business-unit, project, technology, and third-party risk assessments, ensuring risks are evaluated consistently and documented with clear business context. * Maintain risk registers, risk statements, treatment plans, action owners, due dates, and escalation paths, ensuring material risks remain visible and actively managed. * Define and monitor risk appetite, tolerance indicators, key risk indicators, and management reporting that support timely decision-making by security and business leadership. * Advise senior leaders and control owners on risk acceptance, mitigation options, compensating controls, residual risk, and escalation requirements. * Partner with control owners and business stakeholders to improve control design, evidence quality, remediation effectiveness, and the connection between controls and material risks. * Maintain and improve the ISMS, BCMS, and AIMS risk components, including policies, standards, procedures, risk methodologies, control mappings, and governance records. * Coordinate risk-related inputs to internal and external audits, customer assurance activities, regulatory requests, and security questionnaires. * Oversee third-party and supplier risk activities, including inherent risk assessments, due diligence, risk treatment, ongoing monitoring, issue management, and exception handling. * Establish governance routines, workflows, playbooks, service levels, and escalation processes that improve risk visibility, consistency, and operational efficiency. * Track remediation and risk treatment commitments, challenge weak or overdue actions, and provide clear reporting on trends, dependencies, and residual exposure. * Use operational data and metrics to identify systemic issues, improve programme performance, and demonstrate the effectiveness of risk management activities. * Act as an escalation point for complex or ambiguous risk matters and help stakeholders reach practical, defensible, and appropriately documented decisions. * Contribute to the development of GRC and Information Security team capability through coaching, knowledge sharing, and continuous improvement. ### What We’re Looking For You have: * Demonstrable experience leading information security risk assessments and treatment programmes in a complex, technology-led organisation. * Experience with and understanding of recognised compliance frameworks and standards such as ISO 27001, SOC 2, ISO 27017, ISO 27018, NIST, HIPAA, or similar, and their relationship with enterprise risk. * Strong understanding of security and technology risks across systems, networks, applications, cloud services, identity platforms, and business processes. * Experience working with cloud environments such as AWS, GCP, or Azure and the ability to translate technical issues into business risk. * Experience with risk registers, risk acceptance, exception management, remediation tracking, control validation, and residual-risk reporting. * Experience working with internal and external auditors, control owners, executive stakeholders, and cross-functional delivery teams. * Experience with third-party or supplier risk management, including due diligence, contractual risk considerations, and ongoing oversight. * Strong written and verbal communication skills, with the ability to tailor risk narratives for technical teams, auditors, executives, customers, and other stakeholders. * Strong judgement, prioritisation, analytical thinking, and problem-solving skills, especially in ambiguous or cross-functional situations. * The ability to challenge constructively, influence without direct authority, and build trust while maintaining appropriate risk discipline. * Experience using metrics, data, and operational reporting to improve risk visibility and programme effectiveness. ### Bonus Points If You Have * Experience developing enterprise risk reporting, key risk indicators, risk appetite statements, or risk committee materials. * Experience leading customer assurance or security questionnaire programmes. * Experience with GRC, risk, audit, or compliance platforms and workflow automation. * Experience improving risk assessment, evidence collection, control testing, or reporting through automation. * Experience working in a SaaS, cloud, identity, or software development environment. * Relevant certifications such as CISSP, CISM, CISA, CRISC, CGEIT, ISO 27001 Lead Implementer, or ISO 27001 Lead Auditor. * Experience partnering closely with Legal, Sales, Privacy, Engineering, Product, Finance, and Procurement on security and compliance risks. Life at Ping: We believe in and facilitate a flexible, collaborative work environment. We’re growing quickly, but remain true to the innovative, can-do startup values that got us here. Most importantly, we keep hiring talented, smart, fun, and genuinely nice people because that’s who we want to succeed with every day. Here are just a few of the things that make Ping special: * A company culture that empowers you to do your best work. * Employee Resource Groups that create a sense of belonging for everyone. * Regular company and team bonding events. * Competitive benefits and perks. * Global volunteering and community initiatives Our Benefits: * Generous PTO & Holiday Schedule * Parental Leave * Progressive Healthcare Options * Retirement Programs * Opportunity for Education Reimbursement * Commuter Offset (Specific locations) Ping is the collective sum of all our individual experiences, backgrounds and influences and we pride ourselves in growing and learning together. We are committed to building an inclusive and diverse environment where everyone’s individuality is respected and everyone has an Identity. In recruiting for new colleagues, we welcome the unique contributions you can bring and encourage you to be your best self. We are an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex including sexual orientation and gender identity, national origin, disability, protected Veteran Status, or any other characteristic protected by applicable federal, state, or local law. Show more [Apply now >](https://jobicy.com/jobs/156981-risk-manager.md) > Annual salary information is not provided for this position. Explore salary ranges for similar roles in our [Salary Directory ›](https://jobicy.com/salaries.md) * ![Upload CV](data:image/svg+xml;base64,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) ### Upload your resume now To unlock remote work opportunities and be discovered by global employers. This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content. Next step ## Apply now. Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information. Keep exploring ## Related remote jobs. * ![TRM Labs logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/34aa038c-221.png) TRM Labs Oct 25 New ### [Global Investigator – Triage (APAC)](https://jobicy.com/jobs/156961-global-investigator-triage-apac.md) Build a Safer World. TRM Labs provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. TRM’s platforms enable investigators to trace illicit activity, build… * ![TRM Labs logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/34aa038c-221.png) TRM Labs Oct 25 New ### [Global Investigator (APAC)](https://jobicy.com/jobs/156965-global-investigator-apac.md) Build a Safer World. TRM Labs provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. TRM’s platforms enable investigators to trace illicit activity, build… * ![Supabase logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/06/611d3bfa-221.png) Supabase Oct 25 New ### [Platform Security Engineer (AMER/APAC)](https://jobicy.com/jobs/156948-platform-security-engineer-amer-apac.md) About Supabase Supabase is the Postgres development platform, built by developers for developers. We provide a complete backend solution including Database, Auth, Storage, Edge Functions, Realtime, and Vector Search. All… * ![Fastly logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/10/127f9e4bbbdb8767bef358a23bf7f73d.jpeg) Fastly Oct 25 New ### [Threat Detection Analyst (Japanese & English speaking)](https://jobicy.com/jobs/156878-threat-detection-analyst-japanese-english-speaking-2.md) Fastly helps people stay better connected with the things they love. Fastly’s edge cloud platform enables customers to create great digital experiences quickly, securely, and reliably by processing, serving, and… * ![Obsidian Security logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/3c84d813-221.jpeg) Obsidian Security Oct 25 New ### [Senior Solutions Engineer – East](https://jobicy.com/jobs/156883-senior-solutions-engineer-east.md) Obsidian Security is a global leader in cyber security protecting the SaaS and non-human identity layer modern enterprises run on — from Salesforce and Snowflake to the AI agents now… * ![Canonical logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/b4d068a9-221-1.png) Canonical Oct 25 New ### [Security Software Engineer](https://jobicy.com/jobs/149550-security-software-engineer.md) Canonical is a leading provider of open source software and operating systems to the global enterprise and technology markets. Our platform, Ubuntu, is widely used in breakthrough enterprise initiatives such… * ![CertiK logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/03/Jobicy-210308091023-955845.jpg) CertiK Oct 25 New ### [Blockchain Security Engineer – (Solidity / Rust / Golang)](https://jobicy.com/jobs/151470-blockchain-security-engineer-solidity-rust-golang.md) About the Company CertiK is the largest blockchain security auditor and provides a comprehensive suite of tools to secure the industry at scale. To date, CertiK has worked with over… * ![Twilio logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2020/10/WRILS-201023175858-722503.jpg) Twilio Oct 24 New ### [Security Engineer, Incident Response](https://jobicy.com/jobs/156851-security-engineer-incident-response.md) Who we are At Twilio, we’re shaping the future of communications, all from the comfort of our homes. We deliver innovative solutions to hundreds of thousands of businesses and empower… * ![Zscaler logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/b3234031-221.png) Zscaler Oct 24 New ### [Senior Partner Engineer](https://jobicy.com/jobs/156842-senior-partner-engineer.md) Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange platform protects thousands of customers from cyberattacks and data… * ![1Password logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2020/09/WRILS-200909195848-296323.png) 1Password Oct 24 New ### [Developer Intern, Data Security – Winter 2027](https://jobicy.com/jobs/156809-developer-intern-data-security-winter-2027.md) 1Password is growing. We’ve surpassed $500M in ARR and we’re continuing to accelerate, earning a spot on the Forbes Cloud 100 for four years in a row and teaming up… [Browse all jobs](https://jobicy.com/jobs.md)