GRC Analyst

Supabase is seeking a GRC Analyst to join their Compliance & Security team and integrate risk management, audits, and compliance into daily operations. The role involves working closely with engineering, security, IT, and legal to define risk tolerance, maintain compliance programs such as SOC 2 and ISO/IEC 27001:2022, test controls, and manage security reviews. Candidates will operate in a fully remote, global, async environment.

• Have 3+ years of experience in GRC, internal audit, or security compliance at a SaaS or technology company
• Are comfortable working with SOC 2 and ISO 27001 controls, a compliance platform such as Drata, Vanta, and evidence from systems like AWS, GCP, Google Workspace, and Okta
• Communicate clearly across both technical and non-technical audiences
• Have experience in async or globally distributed teams
• Are energized by solving real-world problems for developers
• Are comfortable navigating ambiguity and moving quickly

This role is ideal for individuals with at least 3 years of GRC, internal audit, or security compliance experience at a SaaS or tech company who thrive in fast-paced, asynchronous, globally distributed environments.

Interested candidates should apply directly on the employer's official site.