GRC Analyst
Supabase
About the position
Join the Compliance & Security team as a GRC Analyst, focusing on risk management and compliance programs.
Tech stack
- soc-2
- iso-27001
- drata
- vanta
Requirements
Required:
- 3+ years of experience in GRC, internal audit, or security compliance at a SaaS or technology company
- Comfortable working with SOC 2 and ISO 27001 controls
- Experience in async or globally distributed teams
- Ability to communicate clearly across both technical and non-technical audiences
Nice to have:
- Energized by solving real-world problems for developers
- Comfortable navigating ambiguity and moving quickly
Responsibilities
- Run risk assessments across the company and major product changes
- Maintain the risk register, track remediation to closure
- Monitor controls on a rolling basis, using automated tests where they exist
- Support internal audit, whether performed by an external partner or in-house
Benefits
- Fully Remote with a WeWork membership or co-working allowance
- Every team member receives ESOP (equity ownership) in the company
- Tech Allowance to set up your ideal work environment
- Supabase covers 100% of health insurance for employees and 80% for dependents