Remote GRC Analyst - SOC 2 & ISO 27001 Compliance

Supabase; Pakistan; Remote; PKR 24,896,000 - 35,961,000; Full time

Benefits offered by this job

Fully remote

ESOP

Tech allowance

Health benefits

Annual off-sites

Flexible work

Education allowance

Job summary

Supabase is seeking a GRC Analyst to join our Compliance & Security team and embed risk management, audit and compliance into how we build developer tools that scale. You’ll work with engineering, security, IT and legal to keep SOC 2 and ISO/IEC 27001:2022 programs current, run risk assessments, test controls, and support audits.

In this fully remote role, you’ll collaborate across time zones and disciplines to help Supabase maintain robust controls, evidence collection, and timely responses to

Qualifications

• 3+ years of experience in GRC, internal audit, or security compliance in a SaaS/tech company.
• Experience with SOC 2 and ISO 27001 controls and evidence gathering from cloud platforms like AWS, GCP, Google Workspace, and Okta.
• Ability to communicate clearly across technical and non-technical audiences; comfortable in async/global teams.

Responsibilities

• Run risk assessments and inform leadership on risk tolerance.
• Maintain risk register, track remediation to closure.
• Monitor controls with automated and manual tests; assign owners and due dates.
• Support internal audit with scoped evidence and tracking.
• Manage day-to-day operations for compliance programs and readiness for audits.
• Extend control validation with AI tooling and source-system evidence.

Skills

GRC experience

Internal audit

Security compliance

SaaS/tech company

Tools

Drata

Vanta

AWS

GCP

Google Workspace

Okta

Job description

Supabase is seeking a GRC Analyst to join our Compliance & Security team and embed risk management, audit and compliance into how we build developer tools that scale. You’ll work with engineering, security, IT and legal to keep SOC 2 and ISO/IEC 27001:2022 programs current, run risk assessments, test controls, and support audits.

In this fully remote role, you’ll collaborate across time zones and disciplines to help Supabase maintain robust controls, evidence collection, and timely responses to