GRC Analyst

Supabase

КомпанияSupabase
ФорматУдалённо
ГрафикRemote
АдресRemote, Global

Описание

ABOUT THE ROLE

We’re looking for a GRC Analyst to join our Compliance & Security team and help make risk management, audit and compliance a continuous part of how Supabase runs. You’ll work closely with engineering, security, IT, and legal to help us define our risk tolerance, keep our compliance programs (including SOC 2 and ISO/IEC 27001:2022) current, test controls on a rolling basis, and answer customer and vendor security reviews quickly and accurately.

This role is ideal for someone who thrives in async, fast-paced environments and is excited about building developer tools that scale to millions.

WHAT YOU’LL BE RESPONSIBLE FOR

Run risk assessments across the company and major product changes. Score likelihood and impact, propose treatments, and bring the results to leadership to inform risk tolerance decisions.

Maintain the risk register, track remediation to closure, and report status to compliance and security leadership.

Monitor controls on a rolling basis, using automated tests where they exist and manual testing where they don’t. Triage failures, prioritize by the risk register, and align each finding with an owner and a due date.

Support internal audit, whether performed by an external partner or in-house: propose scope from the risk register, supply evidence, and track findings to closure.

Run day-to-day operations for our compliance programs: evidence collection, control owner follow-up, and readiness ahead of each audit period.

Extend…

Вакансия на сайте компании

Откликнуться в JobToo

GRC Analyst

Описание

Вакансии этой компании

Похожие вакансии