GRC Analyst

📋 Description

• Run risk assessments across the company and major product changes. Score likelihood and impact
• Maintain the risk register, track remediation to closure, and report status to compliance and
• Monitor controls on a rolling basis, using automated tests where they exist and manual testing
• Support internal audit, whether performed by an external partner or in-house: propose scope from
• Run day-to-day operations for our compliance programs: evidence collection, control owner
• Extend continuous control validation beyond what our compliance platform covers. Build custom tests

🎯 Requirements

• Have 3+ years of experience in GRC, internal audit, or security compliance at a SaaS or technology
• Are comfortable working with SOC 2 and ISO 27001 controls, a compliance platform such as Drata
• Communicate clearly across both technical and non-technical audiences
• Have experience in async or globally distributed teams
• Are energized by solving real-world problems for developers
• Are comfortable navigating ambiguity and moving quickly

🎁 Benefits

• Fully Remote: We hire globally. We believe you can do your best work from anywhere. There are no
• ESOP: Every team member receives ESOP (equity ownership) in the company. We want everyone to share
• Tech Allowance: Use this budget to set up your ideal work environment—laptop, monitor, headphones
• Health Benefits: Supabase covers 100% of health insurance for employees and 80% for dependents
• Annual Off-Sites: Once a year, the entire company gathers in a new city for a week of connection
• Flexible Work: We operate asynchronously and trust you to manage your own time. You know what needs