Staff GRC Analyst

Tines

. Partner with Engineering, Security, and Infrastructure teams to translate FedRAMP High, DoD IL4/IL5, CMMC, NIST SP 800-53/800-171, SOC 2, ISO, and other security requirements into actionable technical controls and implementation standards across AWS and Azure .

Posted 10/16/2026full-timeRemote • United StatesLead💰 $215,000 - $230,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in security compliance and technical governance, with a strong focus on translating compliance requirements into actionable technical controls across cloud environments. Proficient in managing FedRAMP authorization processes and implementing security measures in alignment with federal standards.

Highest-signal resume keywords

Security ComplianceFedRAMP AuthorizationCloud SecurityTechnical GRCVulnerability Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

IAMEncryptionLoggingVulnerability ManagementSecure SDLCTechnical ControlsConfiguration StandardsEvidence ValidationGap IdentificationRemediation

Soft Skills

Stakeholder CommunicationIndependent OwnershipAdvisory Skills

Tools & Technologies

AWSAzurePolicy-as-CodeConMonPOA&M Management

Certifications & Qualifications

PMPCISSPCISMCISACCSP

Industry Keywords

FedRAMP HighDoD IL4/IL5CMMCNIST SP 800-53NIST SP 800-171SOC 2ISO3PAO EngagementsAudit ReadinessFederal Requirements

Tech Stack

Tools & technologies

AWSAzureCloudPMPSDLC

About the role

Key responsibilities & impact

Partner with Engineering, Security, and Infrastructure teams to translate FedRAMP High, DoD IL4/IL5, CMMC, NIST SP 800-53/800-171, SOC 2, ISO, and other security requirements into actionable technical controls and implementation standards across AWS and Azure
Assess technical implementations across infrastructure, networking, containers, databases, IAM, encryption, logging, and vulnerability management
Define evidence requirements and validate control implementation, identify gaps, and drive remediation
Support FedRAMP authorization and ongoing operations, including ConMon, POA&M management, vulnerability reporting, evidence packages, and significant change management
Support external assessments and audits, including 3PAO engagements and audit readiness
Monitor evolving federal requirements, including FedRAMP 20x, and keep stakeholders informed
Identify opportunities to scale compliance through automation and policy-as-code
Work closely with Security, Engineering, Product, IT, and Legal
Independently own the area of responsibility, improve existing approaches, and advise stakeholders as new security requirements are adopted

Requirements

What you’ll need

12+ years' experience in security compliance, technical GRC, cloud security, IT audit, or related technical governance roles
Hands-on experience translating compliance requirements into technical controls and configuration standards
Strong knowledge of cloud/SaaS security, including IAM, encryption, logging, vulnerability management, and secure SDLC
Experience supporting FedRAMP authorization, ConMon, POA&M management, and external assessments
Applicants must be authorized to work for any employer in the U.S.
PMP, CISSP, CISM, CISA, or CCSP are a plus