Risk

• Run risk assessments across the company and major product changes
• Score likelihood and impact, propose treatments, and present results to leadership to inform risk tolerance decisions
• Maintain the risk register, track remediation to closure, and report status to compliance and security leadership
• Monitor controls on a rolling basis using automated and manual testing
• Triage control failures, prioritize findings by the risk register, and assign owners and due dates
• Support internal audits by proposing scope, supplying evidence, and tracking findings to closure
• Run day-to-day compliance program operations, including evidence collection, control owner follow-up, and audit readiness
• Extend continuous control validation beyond the compliance platform
• Build custom tests with AI coding tools
• Work with engineering and IT to pull evidence from source systems and validate that tests prove control requirements

Explore GRC Analyst at Supabase. Review requirements and application details.