GRC Analyst

About the role Supabase is hiring a GRC Analyst to join the Compliance and Security team (Security team, Engineering department). You will help run the risk and compliance programs that keep a globally distributed, open source platform trustworthy for millions of developers. What you will do Run risk assessments and maintain the risk register. Support the SOC 2 and ISO/IEC 27001:2022 compliance programs. Perform control testing and collect audit evidence. Support internal and external audits end to end. Build automated control tests so compliance checks run continuously rather than by hand. What you bring 3+ years of experience in GRC, internal audit or security compliance at a SaaS or technology company. Hands-on familiarity with Drata or Vanta. Working knowledge of SOC 2 and ISO/IEC 27001:2022 control frameworks. Careful evidence collection and documentation habits. Comfort working asynchronously with a distributed team. What we offer Fully Remote. We hire globally. We believe you can do your best work from anywhere. ESOP (equity ownership) for every team member. Tech Allowance to set up your ideal work environment. 100% health insurance coverage for employees. Annual off-sites and flexible, asynchronous work. About Supabase Supabase is the Postgres development platform: a full Postgres database, Authentication, instant APIs, Edge Functions, Storage, Realtime and Vector, built in the open and open source from day one. The globally distributed team works from 60+ countries.