Staff GRC Analyst

Job not on LinkedIn

🔥 2 hours ago

🇺🇸 United States – Remote

💵 $215k - $230k / year

⏰ Full Time

🔴 Lead

🎲 Risk

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 3%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Tines

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2018

💼 Consulting

📦 Logistics

☁️ SaaS

Consulting • Logistics • SaaS

Tines is a leading automation platform that empowers security teams and IT professionals to create, run, and monitor workflows in real-time. With a focus on AI-powered automation, Tines connects with a wide range of products and APIs to streamline processes and enhance productivity across various teams, including security, IT, infrastructure, and engineering. It provides tools for building apps and self-service portals, enabling organizations to integrate systems, manage risk, automate incident responses, and drive operational efficiencies. Built for enterprise-grade transparency and compliance, Tines fuels smarter, more secure work environments with ease of use and rapid deployment.

📋 Description

• Partner with Engineering, Security, and Infrastructure teams to translate FedRAMP High, DoD IL4/IL5, CMMC, NIST SP 800-53/800-171, SOC 2, ISO, and other security requirements into actionable technical controls and implementation standards across AWS and Azure • Assess technical implementations across infrastructure, networking, containers, databases, IAM, encryption, logging, and vulnerability management • Define evidence requirements and validate control implementation, identify gaps, and drive remediation • Support FedRAMP authorization and ongoing operations, including ConMon, POA&M management, vulnerability reporting, evidence packages, and significant change management • Support external assessments and audits, including 3PAO engagements and audit readiness • Monitor evolving federal requirements, including FedRAMP 20x, and keep stakeholders informed • Identify opportunities to scale compliance through automation and policy-as-code • Work closely with Security, Engineering, Product, IT, and Legal • Independently own the area of responsibility, improve existing approaches, and advise stakeholders as new security requirements are adopted

🎯 Requirements

• 12+ years' experience in security compliance, technical GRC, cloud security, IT audit, or related technical governance roles • Hands-on experience translating compliance requirements into technical controls and configuration standards • Strong knowledge of cloud/SaaS security, including IAM, encryption, logging, vulnerability management, and secure SDLC • Experience supporting FedRAMP authorization, ConMon, POA&M management, and external assessments • Applicants must be authorized to work for any employer in the U.S. • PMP, CISSP, CISM, CISA, or CCSP are a plus