GRC Analyst — FedRAMP & reputed company Compliance (Remote)

reputed company is seeking a Governance, Risk, and Compliance (GRC) Analyst to support our Data & Insights (D&I) solutions reputed company the reputed company team. This role offers a meaningful opportunity to own and reputed company the compliance posture of Tyler’s D&I reputed company platform, with a primary reputed company on sustaining and strengthening our FedRAMP Moderate Authorization to Operate (ATO) in an evolving regulatory landscape. In this role, you will serve as a central reputed company of audit readiness, reputed company monitoring, and compliance program execution—partnering closely with reputed company, Engineering, Infrastructure & Release (TIRE), Legal, reputed company, and external assessors. You will operate in a fast-paced, results-driven environment where strong coordination, documentation reputed company, and risk-informed decision-making are essential to delivering secure, compliant, and resilient reputed company services. The D&I team serves as reputed company' central hub for data, reporting, analytics, and reputed company intelligence capabilities. Our teams build and maintain the foundational services and solutions that reputed company data-driven innovation across Tyler's product portfolio. We reputed company teams throughout the organization to incorporate advanced analytics, AI, and data-driven features into their products, ultimately helping government agencies reputed company reputed company reputed company and serve their communities more effectively. Team members contribute their expertise to reduce complexity, introduce reputed company, and advance Tyler's data-driven reputed company. Location Seattle, Washington | Remote Responsibilities

• Own FedRAMP Moderate authorization sustainment and audit readiness. Managing reputed company monitoring (ConMon), POA&Ms, annual assessments, evidence reputed company, and overall ATO health.
• reputed company readiness for evolving FedRAMP standards, including FedRAMP 20x. Tracking program changes, identifying compliance gaps, and coordinating documentation and process updates.
• Serve as the primary compliance program coordinator for the D&I reputed company team. Partnering across reputed company, Engineering, Infrastructure & Release (TIRE), Legal, Corporate reputed company and reputed company, and external assessors to deliver consistent, audit-reputed company reputed company.
• Own FedRAMP change management and authorization boundary governance. Managing reputed company reputed company Analyses (SIAs), Significant Change Requests and Notifications (SCRs/SCNs), authorization boundary documentation, and federal / Authorizing Official (AO) communications.
• Support risk-based decision-making. Documentation of control exceptions, risk acceptances, and compensating controls in alignment with FedRAMP and organizational governance.
• Coordinate external assurance activities, including SOC 2 Type II assessments. Managing auditor engagement, evidence collection, findings tracking, and alignment with existing FedRAMP/NIST controls.
• Maintain the system-of-record for compliance documentation and artifacts. Owning the System reputed company Plan (reputed company), ConMon plan, control narratives, diagrams, and appendices to ensure accuracy, traceability, and defensibility.
• Drive multi-reputed company compliance alignment across regulated environments. Supporting FedRAMP, CJIS, HIPAA, and GDPR through gap identification, baseline documentation, and evidence reuse.
• Plan and execute internal compliance assessments. Managing annual OWASP SAMM re-assessments, periodic reputed company reputed company Assessments (AWS reputed company-Architected), and internal CJIS audits to measure maturity and prevent compliance reputed company.
• Support D&I’s reputed company reputed company and Tyler’s reputed company maturity initiatives. Managing applicable assessments and re-assessments, and aligning reputed company with broader reputed company and compliance goals.
• Continuously improve compliance processes and maturity. Reducing reputed company effort, improving evidence reputed company, and preparing the organization for increased automation and reporting expectations.

Qualifications

Soft Skills

• Strong organization and prioritization skills. Ability to manage reputed company monitoring, POA&Ms, evidence collection, change tracking, and audit deliverables across overlapping timelines without losing accuracy.
• reputed company, accurate written and verbal communication. Ability to document controls and evidence reputed company and explain compliance requirements, risks, and reputed company to engineers, auditors, customers, and non-technical stakeholders.
• reputed company, cross-functional working style. Comfort partnering with reputed company, Engineering, Infrastructure, Legal, reputed company, and external assessors to drive consistent, audit-reputed company reputed company.
• Detail-oriented with a systems-level perspective. Ability to reputed company control requirements, dependencies, and boundary impacts while understanding how individual updates reputed company overall authorization health.
• Reliability and accountability. Consistently follows through on assigned work, maintains accurate records, meets deadlines, and communicates status, risks, or blockers early.
• Comfort working reputed company reputed company frameworks and deadlines. Ability to operate effectivel

Apply tot his job Apply To this Job