GRC Analyst — Build Security, Compliance & Trust

Base; Austin (TX); On-site; USD 90,000 - 130,000; Full time

Job summary

Base, America’s next-generation power company, seeks a GRC Analyst to scale security governance across software, hardware, and energy infrastructure. You’ll translate complex requirements into repeatable processes to support customer trust and regulatory readiness.

The role sits on the Security team and focuses on building practical, auditable controls while driving risk reduction. This is a high‑impact, hands‑on position in a startup environment that requires in‑person collaboration.

Qualifications

• 3+ years in security compliance, IT audit, or GRC, including at least one SOC 2 cycle owned end‑to‑end.
• Ability to judge controls by reviewing SIEM, MFA settings, and cloud audit logs.
• Strong organizational and interpersonal skills to coordinate across teams and stakeholders.
• Hands‑on ownership of a GRC platform — Secureframe, Vanta, Drata, or similar.
• Experience building and running a third‑party risk program.
• Comfortable holding remediation deadlines with engineering or operations in a fast‑moving environment.

Responsibilities

• Run Base's compliance programs (SOC 2, ISO 27001, etc.): evidence collection, control testing, and audit coordination
• Write and maintain security policies and procedures
• Assess and track vendor and third party risk
• Maintain the risk register: identify, classify, and remediate risks
• Support internal and external audits and evidence collection
• Maintain control mapping against frameworks like NIST CSF, NIST 800-53, CIS Controls and ISO
• Run periodic risk assessments across business units and systems
• Own responses to customer and partner security assessments and RFPs
• Take point on annual security awareness training
• Coordinate requirements and deadlines across departments

Skills

Security compliance

SOC 2

GRC platforms

Vendor risk management

Audit coordination

Policy writing

Cross-team coordination

Tools

Secureframe

Vanta

Drata

Job description

Base, America’s next-generation power company, seeks a GRC Analyst to scale security governance across software, hardware, and energy infrastructure. You’ll translate complex requirements into repeatable processes to support customer trust and regulatory readiness.

The role sits on the Security team and focuses on building practical, auditable controls while driving risk reduction. This is a high‑impact, hands‑on position in a startup environment that requires in‑person collaboration.