Staff GRC Analyst

Tines has been supporting IT and security teams from a diverse range of customers, including Canva, Reddit, SAP, Coinbase, Mars, Fin (Intercom), and McKesson.
Tines 3B, launched in 2026, is the next generation of Tines – a single, secure environment for every team’s apps, agents and automations.
This flexibility enables our customers to achieve their highest-priority goals faster. Tines has security woven into its DNA, and our platform is secure and private by design.
Were committed to delivering exceptional customer experiences while fostering a company culture that nurtures individual curiosity, growth, and integrity. Staff GRC Analyst
The role will work closely with Security, Engineering, Product, IT, and Legal, going beyond checklist compliance by examining technical configurations, validating data flows, and helping build automated safeguards across a multi-cloud environment.
This is a key role reporting to our Director of GRC and can be based remotely in the United States. Partner with Engineering, Security, and Infrastructure teams to translate FedRAMP High, DoD IL4/IL5, CMMC, NIST SP 800-53/800-171, SOC 2, ISO, and other security requirements into actionable technical controls and implementation standards across AWS and Azure.
Assess technical implementations across infrastructure, networking, containers, databases, IAM, encryption, logging, and vulnerability management to validate alignment with control requirements.
Define evidence requirements and work directly with technical teams to validate control implementation, identify gaps, and drive remediation.
Support FedRAMP authorization and ongoing operations, including ConMon, POA&M management, vulnerability reporting, evidence packages, and significant change management.
Identify opportunities to scale compliance through automation and policy-as-code
12+ years experience in security compliance, technical GRC, cloud security, IT audit, or related technical governance roles.
Hands-on experience translating compliance requirements into technical controls and configuration standards.
Strong knowledge of cloud/SaaS security (IAM, encryption, logging, vulnerability management, secure SDLC).
PMP, CISSP, CISM, CISA, or CCSP are a plus
Target Annual Compensation: $215,000 - 230,000
We are unable to sponsor or take over sponsorship of an employment Visa at this time.

If you’re second-guessing your application, we hope you’ll trust your gut and take the leap too! Tines provides equal employment opportunities to all employees and applicants for employment without regard to sex, race, colour, ethnic or social origin, genetic features, language, religion or belief, political or any other opinion, membership of a national minority, property, birth, disability, age or sexual orientation.

You should act like an application was sent and that you no longer have anything else to do on this.