GRC & Security Compliance Analyst

Socket.dev; Austin (TX); On-site; USD 85,000 - 105,000; Full time

Job summary

Base, America’s next-generation power company, is seeking a GRC Analyst to build and run security governance, risk, and compliance as we scale across software, hardware, manufacturing, and energy infrastructure. You’ll translate complex requirements into practical, repeatable processes to earn customer trust and regulatory readiness.

The role sits on the Security team and requires ownership of SOC 2, vendor risk, and control mappings against NIST/ISO frameworks.

Qualifications

• 3+ years in security compliance, IT audit, or GRC.
• Ownership of a SOC 2 cycle from start to finish is ideal.
• Ability to translate security/compliance into actionable plans.

Responsibilities

• Run security governance programs and compliance activities (SOC 2, ISO 27001, etc.).
• Coordinate evidence collection, control testing, and audit support.
• Maintain policy docs and procedures.
• Manage third-party risk assessments and vendor risk programs.

Skills

Security governance

Risk assessment

Policy writing

Audit coordination

SOC 2

GRC tooling

Vendor risk

Stakeholder coordination

Tools

Secureframe

Vanta

Drata

Job description

Base, America’s next-generation power company, is seeking a GRC Analyst to build and run security governance, risk, and compliance as we scale across software, hardware, manufacturing, and energy infrastructure. You’ll translate complex requirements into practical, repeatable processes to earn customer trust and regulatory readiness.

The role sits on the Security team and requires ownership of SOC 2, vendor risk, and control mappings against NIST/ISO frameworks.