Disable Ping on WAN Router Setting

To be honest, it's not too much of a security risk to leave ping enabled. It IS true that if you leave ping enabled, then someone could remotely ping you & get a response, signifying to them that there is SOME device present at that address. But since you say you already have a service available on port 443 (a very common port), if an attacker did a port scan of your IP they would also see that. To an attacker, a service listening on port 443 is MUCH more interesting than a reply to a ping. In my server/router logs, I see many more port scans from random addresses on the internet to TCP 80 & 443 than I do pings.

There is conceptually a risk of someone performing a "ping flood" as a crude denial-of-service, but I know that Comcast (and many other ISPs) filter these if/when they happen.

Overall, I usually recommend leaving it enabled, since the benefits (you, as an admin, being able to remotely know if the device is up/responding) outweigh the potential drawbacks. That said, you will find many admins who say that keeping it off reduces your internet presence. Personally, I don't see too much of a problem with keeping it on, since as I said someone could already portscan you & see that listening 443 service.

I would be more concerned with how secure your "employee remote access" service on port 443 is. Presumably it's a web server? Which one? Is it updated fully? Is it properly safeguarded to prevent remote injection attacks/password guesses?