GRC Analyst

This is a fully remote position, open to applicants anywhere in the world.

📋 Description

• Conduct risk assessments throughout the organization and for significant product modifications.

• Evaluate the likelihood and impact of risks, suggest treatments, and present findings to leadership to guide risk tolerance decisions.

• Manage the risk register, oversee remediation until completion, and report status to compliance and security leadership.

• Continuously monitor controls through both automated and manual testing methods.

• Assess control failures, prioritize issues based on the risk register, and assign ownership and deadlines.

• Assist with internal audits by defining scope, providing evidence, and tracking findings to resolution.

• Oversee daily compliance program operations, which include gathering evidence, following up with control owners, and ensuring audit readiness.

• Broaden continuous control validation beyond the compliance platform.

• Develop custom tests utilizing AI coding tools.

• Collaborate with engineering and IT teams to extract evidence from source systems and confirm that tests meet control requirements.

⛳️ Requirements

• A minimum of 3 years of experience in Governance, Risk, and Compliance (GRC), internal audit, or security compliance within a SaaS or technology organization.

• Proficient in working with SOC 2 and ISO 27001 controls.

• Familiarity with compliance platforms like Drata or Vanta.

• Experience handling evidence from systems such as AWS, GCP, Google Workspace, and Okta.

• Ability to communicate effectively with both technical and non-technical audiences.

• Background in asynchronous or globally distributed teams.

• Comfortable navigating uncertainty and adapting quickly.

🏝️ Benefits

• Fully remote work environment.

• WeWork membership or co-working allowance applicable globally.

• Employee Stock Ownership Plan (ESOP) for all team members.

• Technology allowance for purchasing laptops, monitors, headphones, or other work-related equipment.

• Supabase covers 100% of health insurance costs for employees and 80% for dependents.

• Annual company retreats.

• Flexible and asynchronous work arrangements.

• Annual education allowance for courses, books, conferences, or other professional development opportunities.