Staff GRC Analyst

📋 Description

• Partner with Engineering, Security, and Infrastructure teams to translate FedRAMP High, DoD
• Assess technical implementations across infrastructure, networking, containers, databases, IAM
• Define evidence requirements and work directly with technical teams to validate control
• Support FedRAMP authorization and ongoing operations, including ConMon, POA&M management
• Support external assessments and audits, including 3PAO engagements and audit readiness.
• Monitor evolving federal requirements (including FedRAMP 20x) and keep stakeholders informed.

🎯 Requirements

• 12+ years' experience in security compliance, technical GRC, cloud security, IT audit, or related
• Hands-on experience translating compliance requirements into technical controls and configuration
• Strong knowledge of cloud/SaaS security (IAM, encryption, logging, vulnerability management, secure
• Experience supporting FedRAMP authorization, ConMon, POA&M management, and external assessments.
• PMP, CISSP, CISM, CISA, or CCSP are a plus

🎁 Benefits

• Tines provides equal employment opportunities to all employees and applicants for employment