{"id":3041336,"url":"https://alion.io/job/supabase-grc-analyst","title":"GRC Analyst","company":{"id":17114,"name":"Supabase","domain":"supabase.com","url":"https://alion.io/company/supabase-com","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":76,"open_postings":15,"ghost_share":0,"stale_share":0.733,"repost_share":0.067,"time_to_fill_p50_days":63,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"remote","remote_scope":"worldwide","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":74000,"max_usd":161000,"period":"year","method":"global_role_seniority_cell","sample_n":854},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AWS","optional":false},{"name":"GCP","optional":false},{"name":"Google Workspace","optional":false},{"name":"ISO 27001","optional":false},{"name":"Okta","optional":false},{"name":"SOC 2","optional":false},{"name":"Supabase","optional":false}],"status":"live","first_seen_at":"2026-10-21T18:33:08Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-10-29T13:44:16Z","board_verified":true,"closed_at":null,"days_open":7,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":7},"description":"About the Role\nWe’re looking for a GRC Analyst to join our Compliance & Security team and help make risk management, audit and compliance a continuous part of how Supabase runs. You’ll work closely with engineering, security, IT, and legal to help us define our risk tolerance, keep our compliance programs (including SOC 2 and ISO/IEC 27001:2022) current, test controls on a rolling basis, and answer customer and vendor security reviews quickly and accurately.\nThis role is ideal for someone who thrives in async, fast-paced environments and is excited about building developer tools that scale to millions.\nWhat You’ll Be Responsible For\nRun risk assessments across the company and major product changes. Score likelihood and impact, propose treatments, and bring the results to leadership to inform risk tolerance decisions.\n\nMaintain the risk register, track remediation to closure, and report status to compliance and security leadership.\n\nMonitor controls on a rolling basis, using automated tests where they exist and manual testing where they don’t. Triage failures, prioritize by the risk register, and align each finding with an owner and a due date.\n\nSupport internal audit, whether performed by an external partner or in-house: propose scope from the risk register, supply evidence, and track findings to closure.\n\nRun day-to-day operations for our compliance programs: evidence collection, control owner follow-up, and readiness ahead of each audit period.\n\nExtend continuous control validation beyond what our compliance platform covers. Build custom tests with AI coding tools, work with engineering and IT to pull evidence from source systems instead of collecting screenshots, and check that each test proves what the control requires.\n\nYou Might Be a Good Fit If You\nHave 3+ years of experience in GRC, internal audit, or security compliance at a SaaS or technology company\n\nAre comfortable working with SOC 2 and ISO 27001 controls, a compliance platform such as Drata, Vanta, and evidence from systems like AWS, GCP, Google Workspace, and Okta\n\nCommunicate clearly across both technical and non-technical audiences\n\nHave experience in async or globally distributed teams\n\nAre energized by solving real-world problems for developers\n\nAre comfortable navigating ambiguity and moving quickly\n\nWhat We Offer\nFully Remote\nWe hire globally. We believe you can do your best work from anywhere. There are no Supabase offices, but we provide a WeWork membership or co-working allowance you can use anywhere in the world.\n\nESOP\nEvery team member receives ESOP (equity ownership) in the company. We want everyone to share in the upside of what we’re building together.\n\nTech Allowance\nUse this budget to set up your ideal work environment-laptop, monitor, headphones, or whatever helps you do your best work.\n\nHealth Benefits\nSupabase covers 100% of health insurance for employees and 80% for dependents, wherever you are. Your wellbeing and your family’s health are important to us.\n\nAnnual Off-Sites\nOnce a year, the entire company gathers in a new city for a week of connection, collaboration, and fun. It’s a highlight of our year.\n\nFlexible Work\nWe operate asynchronously and trust you to manage your own time. You know what needs to be done and when.\n\nProfessional Development\nEvery team member receives an annual education allowance to spend on learning-courses, books, conferences, or anything that supports your growth.\n\nAbout the Team\nSupabase was born-remote and open-source-first. We believe our globally distributed team is our secret weapon in building tools developers love.\n~400 team members\n\n60+ countries\n\n20+ languages spoken\n\nOver $1B raised (including our $500M Series F)\n\n540,000+ community members\n\nWe move fast, build in public, and use what we ship. If it’s in your project, we probably use it in ours too. We believe deeply in the open-source ecosystem and strive to support-not replace-existing tools and communities.","description_format":"text","description_chars":3954,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Flexible schedule","Health insurance","Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Platforms (IaaS & PaaS)","Databases & DBMS","Developer Tools"],"lifecycle":[{"event":"open","at":"2026-10-21T22:49:59Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":7,"expected_fill_days":63,"reasons":["conf:0","stale_co","velocity","win:early","comp:remote"],"computed_at":"2026-10-29T05:49:05Z"},"pay":null,"html_url":"https://alion.io/job/supabase-grc-analyst","json_url":"https://alion.io/job/supabase-grc-analyst.json","meta":{"generated_at":"2026-10-29T17:15:10Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":25808,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":17114},"rest":"https://alion.io/mcp/rest/get_company?id=17114"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsupabase-grc-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsupabase-grc-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsupabase-grc-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/supabase-grc-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsupabase-grc-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3041336}},{"tool":"search_jobs","arguments":{"company":"supabase.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3041336},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}