Senior GRC Analyst

TinesSaaS security

Based remotely in the United States.Full-TimeSenior

SalaryTarget Annual Compensation: $175,000-190,000

Apply NowOpens the employer's application page

Job Details

Experience: 8-12 years of experience in IT compliance, security, or risk management
Required Skills: AWSGCPAzure

Bring 8-12 years of experience in IT compliance, security, or risk management.
Have hands-on experience implementing or maintaining ISO 27001 compliance.
Have strong knowledge of SOC 2 frameworks and audit processes, including evidence collection and control testing.
Have experience supporting FedRAMP certification processes and requirements.
Have experience conducting vendor security assessments and risk analyses.
Understand information security principles, controls, and best practices.
Demonstrate project management skills and the ability to manage multiple compliance initiatives simultaneously.
Have experience on the audit side at a 3PAO or audit firm, or experience driving gap remediation for certification readiness.
Have continuous monitoring (ConMon) and compliance reporting experience.
Have knowledge of cloud security principles and controls, including AWS, Azure, or GCP.
Have experience reviewing contracts for security and compliance requirements.
Have experience with compliance automation tools and techniques, or scripting/API experience for evidence automation.
Industry certifications such as CISSP, CISA, or CISM are listed.

Drive SOC 2 Type II and ISO 27001, 27701, and 42001 audit cycles, including evidence collection, control testing, auditor liaison, and remediation tracking.
Support gap assessments for new certifications under evaluation.
Support FedRAMP work through gap analysis, remediation planning, documentation development, and coordination with 3PAO assessors.
Operate continuous control monitoring, including scan and penetration-test reporting, control drift detection, and evidence freshness.
Run vendor security assessments and help mature the third-party risk program.
Conduct risk analyses for systems, processes, and third-party applications, and implement appropriate controls.
Respond to customer security inquiries, questionnaires, and audit requests; support Sales on RFPs and RFQs; and maintain Trust Center documentation.
Partner with Legal on contract security and compliance reviews, recommend mitigations, and help develop standardized security language.
Use Tines to streamline compliance processes, evidence collection, and reporting.
Review, update, and develop security policies and procedures, and collaborate across teams to embed compliance requirements.

View Full Description & ApplyYou'll be redirected to the employer's site