GRC Analyst

Supabase·Remote, Global·Remote·Posted 21 October 2026

Apply with a tailored CV View on Supabase's site

About the role

ABOUT THE ROLE We’re looking for a GRC Analyst to join our Compliance & Security team and help make risk management, audit and compliance a continuous part of how Supabase runs. You’ll work closely with engineering, security, IT, and legal to help us define our risk tolerance, keep our compliance programs (including SOC 2 and ISO/IEC 27001:2022) current, test controls on a rolling basis, and answer customer and vendor security reviews quickly and accurately. This role is ideal for someone who thrives in async, fast-paced environments and is excited about building developer tools that scale to millions. WHAT YOU’LL BE RESPONSIBLE FOR - Run risk assessments across the company and major product changes. Score likelihood and impact, propose treatments, and bring the results to leadership to inform risk tolerance decisions. - Maintain the risk register, track remediation to closure, and report status to compliance and security leadership. - Monitor controls on a rolling basis, using automated tests where they exist and manual testing where they don’t. Triage failures, prioritize by the risk register, and align each finding with an owner and a due date. - Support internal…

This is a summary of the advert. The full description and the application are on Supabase's careers site.

Apply faster with Prepper

A version of your CV tailored to this GRC Analyst role.
A cover letter written from your CV and this advert.
Prepper can fill in Supabase's application form and send it once you approve.
The application saved in your tracker, with reminders to follow up.

Start free

More roles at Supabase

Prepper is independent and not affiliated with Supabase. Roles are listed from the employer's public careers system and removed when they close.