Supabase
GRC Analyst
Remote · Anywhere · Any timezone · Full-timePay not disclosedAbout a minute here, then a few on Supabase's site. Your application is saved on Tamborin first.
What this role offers
Async-first teamWritten updates, few meetings
Any timezoneAsync-first team, no fixed hours
- Type
- Full-time
- Pay
- Pay not disclosed
- Where
- Remote · Anywhere
- Start
- Flexible
- Who can apply
- Any timezone
- Apply by
- Open until filled
- Experience
- Mid level
- Openings
- 1
About the role
What you'll do
Supabase is hiring a GRC Analyst for its Compliance & Security team. You'll run company-wide risk assessments, keep the risk register current, test controls on a rolling basis and keep the SOC 2 and ISO 27001 programmes audit-ready. You'll also answer customer security reviews and build automated control tests with engineering and IT.
Requirements
- 3+ years in GRC, internal audit or security compliance at a SaaS or tech company
- Hands-on experience with SOC 2 and ISO 27001 controls
- Familiarity with a compliance platform such as Drata or Vanta and evidence from AWS, GCP, Google Workspace or Okta
- Clear communication with technical and non-technical teams
- Experience in async, distributed teams
Open to candidates anywhere in the world; Supabase is fully remote and async.
Skills
GRCSOC 2ISO 27001Risk assessmentVanta/Drata
About Supabase
San Francisco, USAWebsite ↗Pay not disclosedSupabase · Any timezone