The role
You'll run risk assessments, maintain the risk register and handle day-to-day compliance operations for Supabase's SOC 2 and ISO 27001 programs. You'll also build custom control tests with AI coding tools.
What you'll do
- Run risk assessments across the company and major product changes
- Maintain the risk register and track remediation to closure
- Monitor controls on a rolling basis and triage failures
- Support internal audits with scope, evidence and findings follow-up
- Build custom control tests with AI coding tools and engineering
What they're looking for
- 3+ years in GRC, internal audit or security compliance at a tech company
- Hands-on with SOC 2 and ISO 27001 controls
- Experience with a compliance platform such as Drata or Vanta
- Familiarity with evidence from AWS, GCP, Google Workspace and Okta
- Clear communication with technical and non-technical audiences
The company
Supabase
Open-source dev tools company, 60+ countries
Supabase is a born-remote, open-source-first developer tools company with about 400 team members in 60+ countries. It has raised over $1B, including a $500M Series F.
Summarised by Jobs That Travel from Supabase's listing.
