GRC Automation Analyst

Superhuman is an AI productivity platform that integrates with over 1 million applications and websites. Its suite includes Grammarly’s writing assistance, Superhuman Docs’ collaborative workspaces, Mail’s inbox management, and Go, a proactive AI assistant. The platform serves over 40 million people, 50,000 organizations, and 3,000 educational institutions worldwide.

• Automate evidence collection by configuring the GRC automation platform, connecting data sources, building evidence plugins, scoping data sets, authoring analysis rules, and establishing continuous monitoring
• Automate GRC workflows and run compliance as code using Claude Code or similar tools and MCPs for evidence requests, control mapping, gap analysis, vendor reviews, and reporting
• Build and curate the team’s agent harness
• Manage policies, control definitions, and automation in GitHub through branches, pull requests, and reviews
• Design continuous control testing across SOC 2, ISO 27001, ISO 27017/27018, ISO 27701, PCI DSS, and ISO 42001
• Work with control owners and engineering to close gaps, with automated evidence behind each finding
• Design the compliance automation architecture across four products

• 5+ Years of experience in compliance, GRC, or IT audit, with hands-on experience in SOC 2, ISO 27001, PCI DSS, and adjacent frameworks
• 1+ Year using agentic AI systems such as Claude Code or Codex for real compliance work, with delivered automation rather than prototypes
• Comfortable using GitHub repositories, branches, pull requests, and code review
• Able to configure a GRC automation platform directly and become productive with new tools within weeks
• Deep knowledge of GRC, including control design, evidence, risk, and auditors’ perspectives
• Working knowledge of cloud platforms (AWS/Azure/GCP), including IAM, compute, storage, networking, and security controls
• Systems-thinking approach and preference for automating repetitive manual work
• Будет плюсом: CI/CD familiarity, reading APIs, JSON, and logs, Python, bash, or TypeScript scripting, hands-on experience with a GRC automation platform such as Vanta or Drata, scripting or light coding and API integration experience, CISA, CISSP, or ISO 27001 Lead Auditor certifications, AI governance, AI risk management, or ISO 42001 exposure, experience in a technology, SaaS, or engineering-adjacent environment

• Competitive pay and a benefits package for candidates based in Germany, including life care, mental health care, risk benefits, and ample defined time off
• Home office setup support, wellness and pet care stipends, and learning and development opportunities
• Professional development through training, coaching, and regular feedback
• Relocation support to Berlin, including visa assistance, destination services for the candidate and family, and a relocation bonus that can cover expenses such as temporary housing