Superhuman
Superhuman
Superhuman is a productivity software company building AI-enabled tools for email, documents, calendars, databases, and cross-app workflows. Its platform helps teams manage inboxes, coordinate follow-ups, organize knowledge, create collaborative documents, and streamline work across services such as Gmail, Drive, Jira, Claude, ChatGPT, and Cursor. The product suite includes Superhuman Mail, Docs, Go, Calendars, and Databases, with AI features for writing support, meeting scheduling, and task assistance. Superhuman serves teams and enterprises across functions including marketing, IT, and education, and hires in the SaaS, productivity, and artificial intelligence space.

GRC Automation Analyst (Hybrid, Germany)

Automate compliance evidence and control testing for Superhuman’s AI productivity platform. Build agent-assisted workflows spanning SOC 2, ISO, PCI DSS, and AI governance frameworks.

Description

  • Configure and manage the GRC automation platform
  • Integrate data sources, develop evidence plugins, define datasets, create analysis rules, and implement continuous monitoring
  • Replace screenshot-based evidence collection with automated control-mapped collectors
  • Apply Claude Code or comparable agentic AI tools and MCPs to evidence requests, control mapping, gap analysis, vendor assessments, and reporting
  • Develop and maintain the team’s agent harness
  • Manage policies, control definitions, and automation in GitHub through branches, pull requests, and code review
  • Design and validate controls across SOC 2, ISO 27001, ISO 27017/27018, ISO 27701, PCI DSS, and ISO 42001
  • Advance continuous assurance in place of point-in-time assessments
  • Partner with control owners and engineering teams to remediate gaps using automated evidence
  • Deliver automated evidence collectors, eliminate manual screenshot collection, and introduce agent-assisted workflows

Requirements

  • Bring at least five years of experience in compliance, GRC, or IT audit
  • Demonstrate hands-on experience with SOC 2, ISO 27001, PCI DSS, and related frameworks
  • Have at least one year of practical experience using agentic AI tools such as Claude Code or Codex for compliance work
  • Show a track record of delivering compliance automation beyond prototypes
  • Work comfortably with GitHub repositories, branches, pull requests, and code reviews
  • Bring familiarity with CI/CD practices as an advantage
  • Be able to learn and configure a GRC automation platform independently
  • Apply strong GRC knowledge across control design, evidence, risk, and audit practices
  • Understand AWS, Azure, or GCP services, including IAM, compute, storage, networking, and security controls
  • Automate repetitive manual processes
  • Familiarity with APIs, JSON, logs, Python, bash, or TypeScript is a plus
  • Experience with Vanta, Drata, or comparable GRC automation platforms is a plus
  • Scripting, light coding, and API integration experience are a plus
  • Certifications such as CISA, CISSP, ISO 27001 Lead Auditor, or similar are a plus
  • Exposure to AI governance, AI risk management, or ISO 42001 is a plus
  • Experience in technology, SaaS, or an engineering-adjacent environment is a plus

Benefits

  • Professional growth and advancement supported by training, coaching, and regular feedback
  • Remote-first hybrid working model
  • Employee resource groups and connection programs
  • Competitive compensation
  • Life care benefits, including mental health support and risk coverage
  • Generous, clearly defined time off
  • Support for setting up a home office
  • Wellness stipend
  • Pet care stipend
  • Learning and development opportunities
  • Comprehensive relocation assistance to Berlin
  • Visa assistance
  • Destination services for employees and their families
  • Relocation bonus to help cover additional costs such as temporary housing

Related Jobs