Salary not listed
GRC Analyst
OtherRemote — worldwide
Published on 2026-10-21
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Support and improve the company’s risk management, audit, and compliance programs, including SOC 2 and ISO/IEC 27001:2022. The role combines risk assessments, ongoing control testing, audit readiness, and automation of evidence collection in a globally distributed environment.
About the company
Supabase builds an open-source backend platform with Postgres, auth, storage, and realtime APIs. It helps developers launch production apps without managing custom infrastructure.
The team
Compliance & Security team
Stack
SOC 2ISO/IEC 27001:2022DrataVantaAWSGCPGoogle WorkspaceOkta
What you'll do
- Conduct risk assessments and maintain the risk register, tracking remediation to completion.
- Monitor controls continuously, triage failures, and coordinate owners and due dates.
- Support internal audits by shaping scope, providing evidence, and tracking findings.
- Manage compliance operations, evidence collection, and audit readiness.
- Build custom control tests and source evidence directly from systems.
What we're looking for
- 3+ years of experience in GRC, internal audit, or security compliance at a SaaS or technology company.
- Familiarity with SOC 2 and ISO 27001 controls and compliance platforms such as Drata or Vanta.
- Clear communication with technical and non-technical audiences.
- Experience working in async or globally distributed teams.
- Comfort navigating ambiguity and moving quickly.
Benefits
- Company equity through ESOP.
- Remote work worldwide with a WeWork membership or coworking allowance.
- Tech allowance for work equipment.
- Health insurance coverage for employees and dependents.
- Annual company off-sites.
- Flexible async work.
- Annual professional development allowance.