GRC Analyst

Remote, Worldwide

ABOUT THE ROLE

We’re looking for a GRC Analyst to join our Compliance & Security team and help make risk management, audit and compliance a continuous part of how Supabase runs. You’ll work closely with engineering, security, IT, and legal to help us define our risk tolerance, keep our compliance programs (including SOC 2 and ISO/IEC 27001:2022) current, test controls on a rolling basis, and answer customer and vendor security reviews quickly and accurately.

This role is ideal for someone who thrives in async, fast-paced environments and is excited about building developer tools that scale to millions.

WHAT YOU’LL BE RESPONSIBLE FOR

- Run risk assessments across the company and major product changes. Score likelihood and impact, propose treatments, and bring the results to leadership to inform risk tolerance decisions.

- Maintain the risk register, track remediation to closure, and report status to compliance and security leadership.

- Monitor controls on a rolling basis, using automated tests where they exist and manual testing where they don’t. Triage failures, prioritize by the risk register, and align each finding with an owner and a due date.

- Support internal...