GRC Analyst

Job not on LinkedIn

🔥 1 minute ago

🌏 Anywhere in the World

⏰ Full Time

🟡 Mid-level

🟠 Senior

🎲 Risk

👻 Ghost score 25%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Supabase

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2020

☁️ SaaS

🔌 API

🤖 Artificial Intelligence

💰 $80M Series B on 2022-05

SaaS • API • Artificial Intelligence

Supabase is an open source alternative to Firebase, providing a range of backend tools designed to help developers start and scale their applications effectively. It offers features such as a full Postgres database, authentication with Row Level Security, instant APIs, Edge Functions for custom code, real-time data synchronization, and storage for large files. Developers can integrate machine learning models, utilize RESTful APIs, and take advantage of platform-integrated best of breed products. Supabase is designed to be highly portable, extendable, and user-friendly, making it a powerful choice for startups and enterprises looking to innovate quickly and efficiently.

📋 Description

• Run risk assessments across the company and major product changes • Score likelihood and impact, propose treatments, and present results to leadership to inform risk tolerance decisions • Maintain the risk register, track remediation to closure, and report status to compliance and security leadership • Monitor controls on a rolling basis using automated and manual testing • Triage control failures, prioritize findings by the risk register, and assign owners and due dates • Support internal audits by proposing scope, supplying evidence, and tracking findings to closure • Run day-to-day compliance program operations, including evidence collection, control owner follow-up, and audit readiness • Extend continuous control validation beyond the compliance platform • Build custom tests with AI coding tools • Work with engineering and IT to pull evidence from source systems and validate that tests prove control requirements

🎯 Requirements

• 3+ years of experience in GRC, internal audit, or security compliance at a SaaS or technology company • Comfortable working with SOC 2 and ISO 27001 controls • Experience with a compliance platform such as Drata or Vanta • Experience with evidence from systems such as AWS, GCP, Google Workspace, and Okta • Clear communication across technical and non-technical audiences • Experience in async or globally distributed teams • Comfortable navigating ambiguity and moving quickly

🏖️ Benefits

• Fully remote • WeWork membership or co-working allowance usable anywhere in the world • ESOP (equity ownership) for every team member • Tech allowance for laptop, monitor, headphones, or other work equipment • Supabase covers 100% of health insurance for employees and 80% for dependents • Annual company off-sites • Flexible, asynchronous work • Annual education allowance for courses, books, conferences, or other professional development