Base Power
GRC Analyst
Austin, TX · On-site · Full-time · Posted Sep 22, 2026
- Experience
- 3+ years in security compliance, IT audit, or GRC; includes at least one SOC 2 cycle owned start to finish.
About the job
Build and operate Base’s security governance, risk, and compliance program across its software, hardware, manufacturing, field operations, and energy infrastructure.
What you'll do
- Run compliance programs, including evidence collection, control testing, audit coordination, and policy maintenance.
- Manage vendor and third-party risk, risk assessments, the risk register, and control mapping to security frameworks.
- Coordinate audit and customer security assessment responses, awareness training, and remediation deadlines across teams.
What they ask for
- 3+ years in security compliance, IT audit, or GRC, including ownership of at least one SOC 2 cycle from start to finish.
- Technical ability to assess controls by reviewing configurations and logs, such as SIEM, identity-provider MFA, or cloud audit logs.
- Hands-on ownership of a GRC platform, including configuring integrations.
- Experience building and running a third-party risk program.
Tools
SOC 2, ISO 27001, NIST CSF, NIST 800-53, CIS Controls, Secureframe, Vanta, Drata
Model-written summary · the original posting is authoritative