Remote GRC Analyst: Risk & Compliance for SaaS

Supabase; United States; Remote; USD 120,000 - 170,000; Full time

Benefits offered by this job

Fully Remote

ESOP

Tech Allowance

Health Benefits

Annual Off-Sites

Flexible Work

Professional Development

Job summary

Supabase is seeking a GRC Analyst to join the Compliance & Security team and help make risk management, audit, and compliance a continuous part of how we run. You’ll collaborate with engineering, security, IT, and legal to define risk tolerance and keep SOC 2 and ISO/IEC 27001:2022 current.

You’ll build and test controls, support audits, and extend continuous validation with AI tooling. This fully remote role favors asynchronous collaboration across distributed teams and is ideal for someone

Qualifications

• 3+ years of experience in GRC, internal audit, or security compliance at a SaaS or technology company.
• Familiar with SOC 2 and ISO 27001 controls, a compliance platform such as Drata, Vanta, and evidence from systems like AWS, GCP, Google Workspace, and Okta.
• Communicate clearly across both technical and non-technical audiences.
• Have experience in async or globally distributed teams.
• Are energized by solving real-world problems for developers.
• Are comfortable navigating ambiguity and moving quickly.

Responsibilities

• Run risk assessments across the company and major product changes. Score likelihood and impact, propose treatments, and inform risk tolerance decisions.
• Maintain the risk register, track remediation to closure, and report status to leadership.
• Monitor controls on a rolling basis, triage failures, and align findings with owners and due dates.
• Support internal audits by supplying evidence and tracking findings to closure.
• Run day-to-day operations for compliance programs: evidence collection and readiness ahead of audits.
• Extend continuous validation beyond current coverage by building tests with AI coding tools and pulling evidence from source systems.

Skills

GRC experience

Security compliance

Communication

Tools

Drata

Vanta

AWS

GCP

Google Workspace

Okta

Job description

Supabase is seeking a GRC Analyst to join the Compliance & Security team and help make risk management, audit, and compliance a continuous part of how we run. You’ll collaborate with engineering, security, IT, and legal to define risk tolerance and keep SOC 2 and ISO/IEC 27001:2022 current.

You’ll build and test controls, support audits, and extend continuous validation with AI tooling. This fully remote role favors asynchronous collaboration across distributed teams and is ideal for someone