Senior GRC Analyst – Automation & Compliance

VulnU; United States; Remote; USD 175,000 - 190,000; Full time

Benefits offered by this job

Equity

No visa sponsorship

Job summary

Tines is seeking a Senior Governance, Risk, and Compliance Analyst to manage and enhance our compliance programs across SOC 2 Type II, ISO 27001/27701/42001, and FedRAMP. You will collect evidence, test controls, coordinate audits, and automate repetitive tasks using Tines to improve efficiency.

You will partner with cross-functional teams to ensure continuous control monitoring, vendor risk assessments, and responsive customer security assurance while keeping Trust Center documentation current.

Qualifications

• 8-12 years of experience in IT compliance, security, or risk management.
• Hands-on experience implementing or maintaining ISO 27001 compliance.
• Strong knowledge of SOC 2 compliance frameworks and audit processes, including evidence collection and control testing.
• Experience supporting FedRAMP certification processes and requirements.
• Experience conducting vendor security assessments and risk analyses.
• Excellent understanding of information security principles, controls, and best practices.

Responsibilities

• Drive audit cycles end to end for SOC 2 Type II and ISO 27001/27701/42001: evidence collection, control testing, auditor liaison, remediation tracking.
• Support FedRAMP efforts, including gap analysis and coordination with 3PAO assessors.
• Operate year-round continuous control monitoring, including drift detection and evidence freshness.
• Run vendor security assessments and mature third-party risk program.
• Conduct risk analyses for systems, processes, and third-party apps; implement controls.
• Respond to customer security inquiries and support Sales on RFPs/RFQs.

Skills

ISO 27001

SOC 2

FedRAMP

Vendor risk assessments

Information security principles

Project management

APIs

Tools

APIs

Job description

Tines is seeking a Senior Governance, Risk, and Compliance Analyst to manage and enhance our compliance programs across SOC 2 Type II, ISO 27001/27701/42001, and FedRAMP. You will collect evidence, test controls, coordinate audits, and automate repetitive tasks using Tines to improve efficiency.

You will partner with cross-functional teams to ensure continuous control monitoring, vendor risk assessments, and responsive customer security assurance while keeping Trust Center documentation current.