Remote Senior GRC Analyst: FedRAMP & Cloud Security

Tines; United States; Remote; USD 215,000 - 230,000; Full time

Job summary

Tines is seeking a Staff GRC Analyst to bridge technical engineering and external auditors in a remote US-based role. You will translate complex security requirements into concrete controls, validate implementations across multi-cloud environments, and support FedRAMP authorization and audits.

This is a senior, hands-on governance position partnering with Security, Engineering, IT, Legal, and Product teams.

Qualifications

• 12+ years of experience in security compliance, technical GRC, cloud security, IT audit, or related governance roles.
• Hands-on experience translating compliance requirements into technical controls and configuration standards.
• Strong knowledge of cloud/SaaS security (IAM, encryption, logging, vulnerability management, secure SDLC).
• Experience supporting FedRAMP authorization, ConMon, POA&M management, and external assessments.
• PMP, CISSP, CISM, CISA, or CCSP certifications are a plus.

Responsibilities

• Partner with Engineering, Security, and Infrastructure teams to translate FedRAMP High, DoD IL4/IL5, CMMC, NIST SP 800-53/800-171, SOC 2, ISO, and other security requirements into actionable technical controls and implementation standards across AWS and Azure.
• Assess technical implementations across infrastructure, networking, containers, databases, IAM, encryption, logging, and vulnerability management to validate alignment with control requirements.
• Define evidence requirements and work directly with technical teams to validate control implementation, identify gaps, and drive remediation.
• Support FedRAMP authorization and ongoing operations, including ConMon, POA&M management, vulnerability reporting, evidence packages, and significant change management.
• Support external assessments and audits, including 3PAO engagements and audit readiness.
• Monitor evolving federal requirements (including FedRAMP 20x) and keep stakeholders informed.
• Identify opportunities to scale compliance through automation and policy-as-code

Skills

Security compliance

GRC

Cloud security

IT audit

FedRAMP

ConMon

POA&M management

External assessments

Education

PMP/CISSP/CISM/CISA/CCSP certifications

Job description

Tines is seeking a Staff GRC Analyst to bridge technical engineering and external auditors in a remote US-based role. You will translate complex security requirements into concrete controls, validate implementations across multi-cloud environments, and support FedRAMP authorization and audits.

This is a senior, hands-on governance position partnering with Security, Engineering, IT, Legal, and Product teams.