Remote opportunity at
TinesSenior GRC Analyst
Tines operates as an intelligent workflow platform serving global IT and security groups, including major enterprise clients. The organization functions as a vendor-agnostic integrator across entire…
Career Tools
About This Role
Tines operates as an intelligent workflow platform serving global IT and security groups, including major enterprise clients. The organization functions as a vendor-agnostic integrator across entire technology stacks and maintains a privacy- and security-focused architecture. The team is currently looking for an experienced Senior GRC Analyst to join the organization on a full-time, remote basis within the United States. Reporting directly to the Director of GRC, this position focuses heavily…
Job Description
Tines operates as an intelligent workflow platform serving global IT and security groups, including major enterprise clients. The organization functions as a vendor-agnostic integrator across entire technology stacks and maintains a privacy- and security-focused architecture. The team is currently looking for an experienced Senior GRC Analyst to join the organization on a full-time, remote basis within the United States.
Reporting directly to the Director of GRC, this position focuses heavily on the operational execution of commercial compliance frameworks, including SOC 2 Type II, ISO 27001, 27701, and 42001, alongside the FedRAMP program. The incoming professional will partner closely with Staff GRC Analysts to drive audits, manage evidence collection, test controls, evaluate third-party vendors, and handle customer security inquiries. Additionally, the role involves leveraging the Tines platform to automate manual compliance workflows, conducting risk assessments, collaborating with legal teams on security contract reviews, and maintaining organizational security policies.
This opportunity is well-suited for a compliance professional with a strong background in information security, risk management, and audit execution who thrives in a remote environment. Target annual compensation for this role ranges from USD 175,000 to 190,000.
Responsibilities
- Manage end-to-end audit cycles for SOC 2 Type II and ISO 27001, 27701, and 42001 certifications, handling evidence gathering, control testing, auditor coordination, and remediation tracking
- Support FedRAMP certification initiatives such as gap analyses, remediation planning, documentation creation, and interaction with 3PAO assessors
- Operate year-round continuous control monitoring routines to ensure ongoing compliance between audits, covering scan reports, pen test documentation, and control drift detection
- Execute third-party vendor security assessments to evaluate compliance posture and security controls prior to acquisition
- Perform risk analyses on systems, applications, and processes while implementing appropriate risk-mitigating controls
- Address customer security questionnaires, inquiries, and audit requests alongside supporting sales teams with RFPs and RFQs
- Collaborate with the legal department to review contracts for security requirements and develop standardized contract language
- Utilize Tines to automate and streamline compliance reporting, evidence collection, and related internal processes
- Develop, update, and maintain security policies and procedures aligned with industry standards and regulations
- Partner cross-functionally with engineering, product, IT, human resources, legal, and leadership teams to embed compliance protocols into business operations
Requirements
- Possess 8 to 12 years of professional background in IT compliance, security, or risk management
- Demonstrate hands-on experience in building or sustaining ISO 27001 compliance
- Bring robust knowledge of SOC 2 compliance frameworks, control testing methodologies, and audit processes
- Show direct experience supporting FedRAMP certification requirements and procedures
- Have practical experience performing vendor security assessments and risk evaluations
- Maintain strong comprehension of information security principles, controls, and best practices
- Hold authorization to work for any employer in the United States without visa sponsorship
Qualifications
- Previous experience working on the audit side at a 3PAO or audit firm such as Coalfire, Schellman, or KPMG, or driving gap remediation for readiness
- Industry credentials such as CISSP, CISA, or CISM
- Familiarity with compliance automation tooling, scripting, or API utilization for evidence automation
- Experience with continuous monitoring (ConMon) and compliance reporting workflows
- Knowledge of cloud security controls and architectures across AWS, Azure, and GCP
- Experience evaluating security and compliance terms in legal contracts
- Background working within SaaS or technology industry environments
- Familiarity with privacy regulations including GDPR and CCPA
- Prior experience operating in remote-first workplaces
Core Skills
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Where is this job located?
This role is based remotely in the United States.
What is the salary range for the Senior GRC Analyst role?
The target annual compensation is USD 175,000 to 190,000.
Does Tines offer visa sponsorship for this position?
Applicants must be authorized to work for any employer in the U.S. Tines is unable to sponsor or take over sponsorship of employment visas for this role.
What frameworks will this role work with?
The position involves working across commercial certifications including SOC 2 Type II, ISO 27001, 27701, and 42001, as well as the FedRAMP program.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.