GRC Analyst
Join Base Power Company as a GRC Analyst to enhance security governance, risk, and compliance in a fast-paced startup environment.
Posted by employer 1 month ago
First seen on Joblaze 1 month ago
Last verified on the company career page 1 week ago
Skills & Technologies
What you'll build
- Run Base's compliance programs
- Write and maintain security policies
- Assess and track vendor risk
- Maintain the risk register
- Support internal and external audits
Must have
- 3+ years in security compliance, IT audit, or GRC
- Experience with SOC 2 cycle
- Hands-on ownership of a GRC platform
Nice to have
- Experience building a third-party risk program
- Technical depth to judge controls
Requirements
- Experience
- 3+ years
Not disclosed in this posting: compensation, visa sponsorship.
Joblaze summary
The GRC Analyst at Base Power Company is responsible for managing the security governance, risk, and compliance program, ensuring that security requirements are effectively translated into actionable processes. This role requires expertise in compliance frameworks like SOC 2 and ISO 27001, along with strong organizational skills to coordinate across various teams. Ideal candidates have at least three years of experience in security compliance or IT audit, and a hands-on approach to GRC platforms. As a startup, Base emphasizes adaptability, making this role suitable for those comfortable in a fast-paced environment.
Joblaze insights
Quick facts
- Is the GRC Analyst role remote?
- No — this is an on-site role in Austin, TX.
- How much experience is required?
- At least 3 years of relevant experience for this GRC Analyst role.
- Where is the role based?
- Base Power Company is hiring for this position in Austin, TX.
- What's the tech stack?
- Joblaze extracted these technologies from the posting: CIS Controls, Drata, ISO 27001, NIST 800-53, NIST CSF, SOC 2.
- What seniority level is this role?
- Base Power Company targets mid-level candidates for this position.
- Is this full-time or contract?
- Full-time for this GRC Analyst role at Base Power Company.
From the original posting
About the Role
We are seeking a GRC Analyst to help build and run Base’s security governance, risk, and compliance program as the company scales across software, hardware, manufacturing, field operations, and energy infrastructure. This role will sit on the Security team and help turn security requirements into practical, repeatable processes that support customer trust, regulatory readiness, and operational resilience.
The ideal candidate is detail-oriented, organized, and comfortable translating complex security and compliance requirements into clear action plans. This is an opportunity to make GRC more than a checkbox function, helping Base earn trust, reduce risk, and scale securely.
What You'll Do
Run Base's compliance programs (SOC 2, ISO 27001, etc.): evidence collection, control testing, and audit coordination
Write and maintain security policies and procedures
Assess and track vendor and third party risk
Maintain the risk register: identify, classify, and remediate risks
Support internal and external audits and evidence collection
Maintain control mapping against frameworks like NIST CSF, NIST 800-53, CIS Controls and ISO
Run periodic risk assessments across business units and systems
Own responses to customer and partner security assessments and RFPs
Take point on annual security awareness training
Coordinate requirements and deadlines across departments
What You'll Bring
3+ years in security compliance, IT audit, or GRC, including at least one SOC 2 cycle owned start to finish
Enough technical depth to judge a control yourself - read a SIEM configuration, an identity provider's MFA settings, or a cloud audit log and decide whether it holds up
Strong organizational and interpersonal skills to coordinate across teams and stakeholders
Hands-on ownership of a GRC platform — Secureframe, Vanta, Drata, or similar — including configuring integrations
Experience building and running a third-party risk program
Comfortable holding remediation deadlines with engineering or operations in a fast-moving environment
About the Team
GRC is a crucial function embedded in the Security team. This role will have a direct impact on the overall security posture of the company through industry frameworks and controls. Our team operates with clear accountability, tight feedback loops, and a strong bias to action.
Our Values
First Principles Thinking: Question assumptions. Principles > rules.
Standard company text repeated across Base Power Company's postings is omitted here.