SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 215,000 - 230,000 / annual
Tines is seeking a Staff GRC Analyst to serve as the technical bridge between engineering teams and external auditors. This role reports to the Director of GRC and independently owns compliance and governance responsibilities across a multi-cloud environment.
You will partner with Engineering, Security, Infrastructure, Product, IT, and Legal teams to translate complex federal and industry security requirements—including FedRAMP High, DoD IL4/IL5, CMMC, NIST SP 800-53/800-171, SOC 2, and ISO standards—into actionable technical controls and implementation standards across AWS and Azure.
Key responsibilities include:
- Assessing technical implementations across infrastructure, networking, containers, databases, IAM, encryption, logging, and vulnerability management to validate alignment with control requirements
- Defining evidence requirements and working directly with technical teams to validate control implementation, identify gaps, and drive remediation
- Supporting FedRAMP authorization and ongoing operations, including ConMon, POA&M management, vulnerability reporting, evidence packages, and significant change management
- Supporting external assessments and audits, including 3PAO engagements and audit readiness
- Monitoring evolving federal requirements (including FedRAMP 20x) and keeping stakeholders informed
- Identifying opportunities to scale compliance through automation and policy-as-code
Tines is the intelligent workflow company powering critical workflows for customers including Canva, Reddit, SAP, Coinbase, Mars, Fin (Intercom), and McKesson. Tines 3B, launched in 2026, represents the next generation—a single, secure environment for every team's apps, agents, and automations. The company is vendor-agnostic, integrating with any API-enabled service, with security woven into its DNA.
REQUIREMENTS:
- 12+ years' experience in security compliance, technical GRC, cloud security, IT audit, or related technical governance roles
- Hands-on experience translating compliance requirements into technical controls and configuration standards
- Strong knowledge of cloud/SaaS security (IAM, encryption, logging, vulnerability management, secure SDLC)
- Experience supporting FedRAMP authorization, ConMon, POA&M management, and external assessments
- PMP, CISSP, CISM, CISA, or CCSP certifications are a plus
- Must be authorized to work for any employer in the U.S.; visa sponsorship is not available
