GRC Analyst
New
S
SupabaseGRC and security compliance
Remote, GlobalFull-TimeMiddle
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- 3+ years of experience in GRC, internal audit, or security compliance at a SaaS or technology company
- Required Skills
- AWSGCP
Requirements
- Have 3+ years of experience in GRC, internal audit, or security compliance at a SaaS or technology company.
- Be comfortable working with SOC 2 and ISO 27001 controls.
- Be comfortable with a compliance platform such as Drata or Vanta.
- Be comfortable working with evidence from systems such as AWS, GCP, Google Workspace, and Okta.
- Communicate clearly across technical and non-technical audiences.
- Have experience working in async or globally distributed teams.
Responsibilities
- Run risk assessments across the company and major product changes, score likelihood and impact, and propose treatments.
- Present risk assessment results to leadership to inform risk tolerance decisions.
- Maintain the risk register, track remediation to closure, and report status to compliance and security leadership.
- Monitor controls using automated or manual tests, triage failures, and assign findings to owners with due dates.
- Support internal audits by proposing scope, supplying evidence, and tracking findings to closure.
- Run day-to-day compliance program operations, including evidence collection, control owner follow-up, and audit readiness.
- Extend continuous control validation by building custom tests with AI coding tools.
- Work with engineering and IT to pull evidence from source systems and verify that tests prove the control requirements.
View Full Description & ApplyYou'll be redirected to the employer's site
