Information Security Analyst

We're headquartered in Denver, Colorado and we have offices and employees around the globe. We serve the largest, most demanding enterprises worldwide, including more than half of the Fortune 100. At Ping Identity, we're changing the way people and businesses think about cybersecurity, digital experiences, and identity and access management. 

As an Information Security Analyst, you will work closely with the Information Security Manager and Chief Information Security Officer to maintain and improve Ping Identity’s Information Security Management System. You will develop and maintain security policies, assess and review policy compliance across the organisation, assess organisational security risks and develop risk treatment strategies, support internal and external audit activities, and provide customer assurance by engaging in customer assessments and audits, working with internal teams and control owners to understand, document and implement customer contractual security requirements.

Responsibilities

• Maintain relationships with customers and internal stakeholders and control owners alike;
• Manage customer questionnaires, RFx and security assessments;
• Evaluate compliance with contractual, regulatory and compliance requirements;
• Help manage the compliance and audit platform, working with system owners to implement automated evidence collection and validation to ease the customer audit lifecycle.

You have:

• 3+ years of experience in the information security or information technology field.
• Understanding of effective security controls at the systems, network, and application level and how to apply with cloud-based services.
• Experience working with AWS, GCP, or Azure.
• Experience with customer security assessments.
• Experience handling and coordinating response to customer enquiries regarding technology or security issues.
• Knowledge of industry standard security control frameworks and guidelines.

You will:

• Collaborate with the Information Security team for continuous improvements for customer contractual controls and the internal security program;
• Assess organisational risk and work with relevant stakeholders to develop risk treatment strategies and processes;
• Develop and maintain security policies and work with the wider organisation to ensure compliance;
• Support internal and external audits;
• Experience with audit and compliance platforms
• Experience managing audits and auditors
• CISSP, CISM, CISA or Comptia Security+