Remote Senior GRC Analyst - Compliance & Audit Orchestrator

Tines; United States; Remote; USD 175,000 - 190,000; Full time

Job summary

Tines is seeking an experienced Senior Governance, Risk, and Compliance (GRC) Analyst to drive and operate our compliance programs during a pivotal growth phase. Reporting to the Director of GRC, you will own the operational delivery behind certification efforts, from evidence collection to remediation tracking, while helping automate processes with Tines.

This role is based remotely in the United States and requires hands-on experience with SOC 2, ISO 27001/27701/42001, and FedRAMP programs, as

Qualifications

• 8-12 years of experience in IT compliance, security, or risk management.
• Hands-on ISO 27001 implementation experience.
• Strong knowledge of SOC 2 auditing and evidence collection.
• Experience with FedRAMP certification processes.
• Vendor security assessments and risk analyses experience.
• Industry certifications such as CISSP, CISA, or CISM.

Responsibilities

• Drive SOC 2 Type II and ISO 27001/27701/42001 audit cycles: evidence collection, control testing, auditor liaison, remediation tracking.
• Support FedRAMP efforts: gap analysis, remediation planning, documentation, and 3PAO coordination.
• Operate continuous control monitoring to keep certifications live between audits.
• Run vendor security assessments and mature third-party risk program.
• Conduct risk analyses for systems and third-party apps; implement mitigating controls.
• Respond to customer security inquiries, support RFPs/RFQs, update Trust Center documents.

Skills

IT compliance

ISO 27001 implementation

SOC 2 auditing

FedRAMP

Vendor risk assessment

Information security principles

Project management

Stakeholder communications

Audit readiness

CISSP/CISA/CISM

Compliance automation

Cloud security (AWS/Azure/GCP)

Contract review for security

Remote-first work

Tools

Automation tooling

ConMon tooling

Evidence automation scripting

Job description

Tines is seeking an experienced Senior Governance, Risk, and Compliance (GRC) Analyst to drive and operate our compliance programs during a pivotal growth phase. Reporting to the Director of GRC, you will own the operational delivery behind certification efforts, from evidence collection to remediation tracking, while helping automate processes with Tines.

This role is based remotely in the United States and requires hands-on experience with SOC 2, ISO 27001/27701/42001, and FedRAMP programs, as