About the company
Tines is the intelligent workflow company that powers some of the world's most important workflows. Tines has been supporting IT and security teams from a diverse range of customers, including Canva, Reddit, SAP, Coinbase, Mars, Fin (Intercom), and McKesson. Tines 3B, launched in 2026, is the next generation of Tines – a single, secure environment for every team’s apps, agents and automations. Tines is vendor-agnostic, integrating with any API-enabled service.
Responsibilities
- Partner with Engineering, Security, and Infrastructure teams to translate FedRAMP High, DoD IL4/IL5, CMMC, NIST SP 800-53/800-171, SOC 2, ISO, and other security requirements into actionable technical controls and implementation standards across AWS and Azure.
- Assess technical implementations across infrastructure, networking, containers, databases, IAM, encryption, logging, and vulnerability management to validate alignment with control requirements.
- Define evidence requirements and work directly with technical teams to validate control implementation, identify gaps, and drive remediation.
- Support FedRAMP authorization and ongoing operations, including ConMon, POA&M management, vulnerability reporting, evidence packages, and significant change management.
- Support external assessments and audits, including 3PAO engagements and audit readiness.
- Monitor evolving federal requirements (including FedRAMP 20x) and keep stakeholders informed.
- Identify opportunities to scale compliance through automation and policy-as-code.
Requirements
- 12+ years' experience in security compliance, technical GRC, cloud security, IT audit, or related technical governance roles.
- Hands-on experience translating compliance requirements into technical controls and configuration standards.
- Strong knowledge of cloud/SaaS security (IAM, encryption, logging, vulnerability management, secure SDLC).
- Experience supporting FedRAMP authorization, ConMon, POA&M management, and external assessments.
- PMP, CISSP, CISM, CISA, or CCSP are a plus.
Conditions
- Target Annual Compensation: $215,000 - 230,000.
- Remote position based in the United States.
- Applicants must be authorized to work for any employer in the U.S.; visa sponsorship is not available.