Tines is the intelligent workflow company powering important workflows for customers including Canva, Reddit, SAP, Coinbase, Mars, Fin (Intercom), and McKesson
Tines 3B, launched in 2026, is a single secure environment for every team's apps, agents and automations
Vendor-agnostic, integrating with any API-enabled service
Values: Simplicity, Speed, Soundness
Responsibilities
Drive audit cycles end to end for SOC 2 Type II and ISO 27001 / 27701 / 42001: evidence collection, control testing, auditor liaison, remediation tracking
Support FedRAMP efforts including gap analysis, remediation planning, documentation, and coordination with 3PAO assessors
Operate year-round continuous control monitoring: scan and pen test reporting, control drift detection, evidence freshness
Run vendor security assessments and mature third-party risk program
Conduct risk analyses for systems, processes, and third-party applications
Respond to customer security inquiries, questionnaires, and audit requests; support Sales on RFPs and RFQs
Partner with Legal to review contracts for security and compliance requirements
Use Tines to streamline compliance processes and evidence collection
Review, update and develop security policies and procedures
Partner with Engineering, Product, IT, Legal, HR and leadership to embed compliance
Stay current with evolving compliance standards and regulations
Requirements
8-12 years of experience in IT compliance, security, or risk management
Hands-on experience implementing or maintaining ISO 27001 compliance
Strong knowledge of SOC 2 frameworks and audit processes