Remote Senior GRC Analyst – FedRAMP & Cloud Security

Tines Security Ltd.; United States; Remote; USD 215,000 - 230,000; Full time

Benefits offered by this job

Startup equity & extended exercise wdw

Matching retirement plans

Home office setup

25 days annual leave

Generous parental leave programs

Flexibility in how and where you work

Phone and home Internet allowance

Job summary

Tines is seeking a Staff GRC Analyst to bridge engineering and auditors across a multi-cloud environment. You will translate security requirements into concrete technical controls and collaborate with Security, Engineering, Product, IT, and Legal to ensure audit readiness.

This remote role reports to the Director of GRC; ideal candidates have 12+ years in security compliance and relevant certifications. Target annual compensation is $215,000–$230,000, with sponsorship not available for visas.

Qualifications

• 12+ years in security compliance or related governance roles.
• Translate compliance requirements into technical controls and configuration standards.
• Strong knowledge of cloud security (IAM, encryption, logging, vulnerability management).
• Experience supporting FedRAMP authorization, ConMon, POA&M management, and external assessments.

Responsibilities

• Translate FedRAMP High, DoD IL4/IL5, CMMC, NIST SP 800-53/800-171, SOC 2, ISO requirements into actionable controls across AWS and Azure.
• Assess infrastructure, networking, containers, databases, IAM, encryption, logging, and vulnerability management for alignment with control requirements.
• Define evidence requirements and validate control implementation with engineering teams.
• Support FedRAMP authorization and ongoing operations, ConMon, POA&M management, vulnerability reporting, and evidence packages.
• Support external assessments and audits, including 3PAO engagements.
• Monitor evolving federal requirements and keep stakeholders informed.
• Identify opportunities to scale compliance via automation and policy-as-code

Skills

Security governance

Cloud security

IT audit

GRC experience

Education

CISSP

CISM

CISA

CCSP

Job description

Tines is seeking a Staff GRC Analyst to bridge engineering and auditors across a multi-cloud environment. You will translate security requirements into concrete technical controls and collaborate with Security, Engineering, Product, IT, and Legal to ensure audit readiness.

This remote role reports to the Director of GRC; ideal candidates have 12+ years in security compliance and relevant certifications. Target annual compensation is $215,000–$230,000, with sponsorship not available for visas.