GRC Analyst: Build Secure, Scalable Compliance Programs

Base Power Company; Austin (TX); On-site; USD 110,000 - 150,000; Full time

Job summary

Base Power Company is seeking a GRC Analyst to help build and run Base’s security governance, risk, and compliance program as the company scales across software, hardware, manufacturing, field operations, and energy infrastructure.

The ideal candidate is detail-oriented, organized, and comfortable translating complex security and compliance requirements into clear action plans, helping Base earn trust, reduce risk, and scale securely.

Qualifications

• 3+ years in security compliance, IT audit, or GRC.
• Experience owning a SOC 2 cycle from start to finish.
• Ability to interpret SIEM configurations and cloud audit logs for controls.

Responsibilities

• Run Base's governance, risk, and compliance programs across the org.
• Maintain control mappings to standards like NIST CSF, NIST 800-53, CIS, ISO.
• Coordinate audits, evidence collection, and remediation tracking.
• Assess vendor and third-party risk and maintain the risk register.
• Own responses to customer security assessments and RFPs.
• Deliver security awareness training and policy updates.

Skills

Security compliance

SOC 2

IT audit

GRC platforms

Vendor risk management

Cross-functional coordination

Tools

Secureframe

Vanta

Drata

Job description

Base Power Company is seeking a GRC Analyst to help build and run Base’s security governance, risk, and compliance program as the company scales across software, hardware, manufacturing, field operations, and energy infrastructure.

The ideal candidate is detail-oriented, organized, and comfortable translating complex security and compliance requirements into clear action plans, helping Base earn trust, reduce risk, and scale securely.