Note: The job is a remote job and is open to candidates in USA. Tines is seeking a Staff GRC Analyst to bridge technical engineering teams and external auditors. The role translates security requirements into technical controls, validates implementations across AWS and Azure, supports FedRAMP authorization and audits, and helps scale compliance through automation.

Responsibilities

• Partner with Engineering, Security, and Infrastructure teams to translate FedRAMP High, DoD IL4/IL5, CMMC, NIST SP 800-53/800-171, SOC 2, ISO, and other security requirements into actionable technical controls and implementation standards across AWS and Azure
• Assess technical implementations across infrastructure, networking, containers, databases, IAM, encryption, logging, and vulnerability management to validate alignment with control requirements
• Define evidence requirements and work directly with technical teams to validate control implementation, identify gaps, and drive remediation
• Support FedRAMP authorization and ongoing operations, including ConMon, POA&M management, vulnerability reporting, evidence packages, and significant change management
• Support external assessments and audits, including 3PAO engagements and audit readiness
• Monitor evolving federal requirements (including FedRAMP 20x) and keep stakeholders informed
• Identify opportunities to scale compliance through automation and policy-as-code

Skills

• 12+ years' experience in security compliance, technical GRC, cloud security, IT audit, or related technical governance roles
• Hands-on experience translating compliance requirements into technical controls and configuration standards
• Strong knowledge of cloud/SaaS security (IAM, encryption, logging, vulnerability management, secure SDLC)
• Experience supporting FedRAMP authorization, ConMon, POA&M management, and external assessments
• Applicants for this opportunity must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment Visa at this time
• PMP, CISSP, CISM, CISA, or CCSP are a plus

Benefits

• Can be based remotely in the United States

Company Overview

• Tines is a no-code workflow automation platform designed especially for security teams. It was founded in 2018, and is headquartered in Dublin, Dublin, IRL, with a workforce of 201-500 employees. Its website is https://www.tines.com.