Senior GRC Analyst

59 minutes ago
Full-time
Lead
Cybersecurity
Tines

Tines

Tines is a smart, secure workflow builder that empowers technical teams to automate processes without code, making security teams more effective and efficient.

Construction & Engineering
51-250
Founded 2018
$96M raised

Description

  • Drive SOC 2 Type II and ISO 27001, 27701, and 42001 audit cycles, including evidence collection, control testing, auditor coordination, and remediation tracking.
  • Support FedRAMP gap analysis, remediation planning, documentation, and coordination with 3PAO assessors.
  • Operate continuous control monitoring, including scan and penetration-test reporting, control drift detection, and evidence freshness.
  • Conduct vendor security assessments and risk analyses for systems, processes, and third-party applications.
  • Respond to customer security questionnaires, audit requests, RFPs, and RFQs while maintaining Trust Center documentation.
  • Review contracts with Legal for security and compliance requirements and develop standardized security language.
  • Automate compliance workflows, evidence collection, and reporting using Tines and related tools.
  • Develop and maintain security policies and procedures aligned with regulatory requirements and industry practices.
  • Collaborate with Engineering, Product, IT, Legal, HR, and leadership to embed compliance requirements.
  • Monitor evolving compliance standards and regulatory requirements relevant to Tines and its customers.

Requirements

  • 8–12 years of experience in IT compliance, security, or risk management.
  • Hands-on experience implementing or maintaining ISO 27001 compliance.
  • Strong knowledge of SOC 2 frameworks, evidence collection, control testing, and audit processes.
  • Experience supporting FedRAMP certification processes and requirements.
  • Experience conducting vendor security assessments and risk analyses.
  • Strong understanding of information security principles, controls, and best practices.
  • Strong project management and communication skills, including translating technical requirements for nontechnical stakeholders.
  • Audit-side experience at a 3PAO or audit firm, or experience driving certification-readiness remediation.
  • CISSP, CISA, CISM, or similar industry certification preferred.
  • Experience with compliance automation, scripting/API-based evidence automation, continuous monitoring, cloud security, contract reviews, SaaS companies, GDPR/CCPA, and remote-first environments preferred.
  • Authorization to work for any U.S. employer; visa sponsorship is unavailable.

Benefits

  • Target annual compensation of $175,000–$190,000.
  • Remote-based role in the United States.
  • Equal employment opportunities for all employees and applicants.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Compliance Analyst

Turing 251-1K Internet Software & Services

Turing is hiring a remote Compliance Analyst to protect its global technical-talent network by managing KYC, identity verification, AML screening, and fraud-quality controls across more than 100 countries.

1 hour, 29 minutes ago

Part D Senior Investigator

Attain Talent 1-10 staffing & recruiting

Attain Talent is seeking a Part D Senior Investigator to support federal healthcare program integrity through investigations, compliance oversight, risk assessment, and evidence-based recommendations involving pharmacies, dispensers, and manufacturers.

1 day, 1 hour ago

Compliance & Sustainability Intelligence Manager (Emerging Programs)

rePurpose Global 51-250 Professional Services

rePurpose Global is hiring a Compliance & Sustainability Intelligence Manager to research evolving packaging EPR regulations, guide consumer brands through compliance, and shape the company’s regulatory intelligence and platform strategy.

2 days, 1 hour ago

IT Security & Compliance Lead (Amsterdam, NLD)

B Lab 51-250 Diversified Consumer Services

B Lab is seeking a full-time IT Security & Compliance Lead in Amsterdam to establish consistent security governance, compliance, and risk management across its consolidating global network.

Cybersecurity Penetration Testing Salesforce
6 days, 1 hour ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers