Senior GRC Analyst

🔥 12 hours ago

🇺🇸 United States – Remote

💵 $175k - $190k / year

⏰ Full Time

🟠 Senior

🎲 Risk

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 3%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Tines

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2018

💼 Consulting

📦 Logistics

☁️ SaaS

Consulting • Logistics • SaaS

Tines is a leading automation platform that empowers security teams and IT professionals to create, run, and monitor workflows in real-time. With a focus on AI-powered automation, Tines connects with a wide range of products and APIs to streamline processes and enhance productivity across various teams, including security, IT, infrastructure, and engineering. It provides tools for building apps and self-service portals, enabling organizations to integrate systems, manage risk, automate incident responses, and drive operational efficiencies. Built for enterprise-grade transparency and compliance, Tines fuels smarter, more secure work environments with ease of use and rapid deployment.

📋 Description

• Drive audit cycles end to end for SOC 2 Type II and ISO 27001 / 27701 / 42001, including evidence collection, control testing, auditor liaison, and remediation tracking • Support gap assessments for new certifications • Support FedRAMP efforts through gap analysis, remediation planning, documentation development, and coordination with 3PAO assessors • Operate continuous control monitoring, including scan and pen test reporting, control drift detection, and evidence freshness • Run vendor security assessments and mature the third-party risk program • Conduct risk analyses for systems, processes, and third-party applications and implement mitigating controls • Respond to customer security inquiries, questionnaires, and audit requests; support Sales on RFPs and RFQs; maintain Trust Center documentation • Partner with Legal on contract security and compliance reviews, security provisions, compliance risks, and standardized security language • Use Tines to automate compliance processes, evidence collection, and reporting • Review, update, and develop security policies and procedures • Partner with Engineering, Product, IT, Legal, HR, and leadership to embed compliance requirements • Monitor evolving compliance standards and regulatory requirements

🎯 Requirements

• 8-12 years of experience in IT compliance, security, or risk management • Hands-on experience implementing or maintaining ISO 27001 compliance • Strong knowledge of SOC 2 compliance frameworks and audit processes, including evidence collection and control testing • Experience supporting FedRAMP certification processes and requirements • Experience conducting vendor security assessments and risk analyses • Excellent understanding of information security principles, controls, and best practices • Strong project management skills, with the ability to manage multiple compliance initiatives simultaneously • Exceptional communication skills for translating technical requirements to non-technical stakeholders • Previous experience on the audit side — at a 3PAO or audit firm (e.g. Coalfire, Schellman, KPMG) — or driving gap remediation for certification readiness • Industry certifications such as CISSP, CISA, or CISM • Experience with compliance automation tools and techniques, or scripting/API experience for evidence automation • Continuous monitoring (ConMon) and compliance reporting experience • Knowledge of cloud security principles and controls (AWS, Azure, GCP) • Experience reviewing contracts for security and compliance requirements • Experience in SaaS or technology companies • Familiarity with privacy regulations (GDPR, CCPA) • Experience working in remote-first environments • Applicants must be authorized to work for any employer in the U.S.; employment visa sponsorship is unavailable