Senior GRC Analyst – Remote AI Compliance & Risk

Ethos; Dubai; On-site; AED 405,000 - 506,000; Full time

Benefits offered by this job

Fully remote

Flexible schedule

Job summary

Ethos is seeking senior GRC analysts to train AI on professional documents and related tasks. This fully remote, flexible role targets experts with 5+ years in cybersecurity governance, risk management, and compliance, with ownership of SOC 2, ISO 27001, or NIST work.

You will create and review risk assessments, control matrices, and vendor security questionnaires across core workflows, including audit readiness, incident reports, and security dashboards.

Qualifications

• 5+ years in cybersecurity GRC, IT audit, or information security compliance with direct ownership of SOC 2, ISO 27001, or NIST work.
• Hands-on experience writing or reviewing risk assessments, control matrices, and vendor security questionnaires.
• Expert-level document, spreadsheet, and slide craftsmanship with strong written communication and detail.

Responsibilities

• Create, evaluate, and refine AI-generated documents, spreadsheets, and slide decks across core workflows such as SOC 2/ISO 27001 audit readiness.
• Develop and review risk assessments, control matrices, and vendor security questionnaires for audits.
• Prepare incident response, breach reports, policy mappings, and board-level security dashboards.

Skills

GRC governance

IT audit

Information security

Security risk assessment

Vendor security questionnaires

Tools

SOC 2

ISO 27001

NIST framework

Job description

Ethos is seeking senior GRC analysts to train AI on professional documents and related tasks. This fully remote, flexible role targets experts with 5+ years in cybersecurity governance, risk management, and compliance, with ownership of SOC 2, ISO 27001, or NIST work.

You will create and review risk assessments, control matrices, and vendor security questionnaires across core workflows, including audit readiness, incident reports, and security dashboards.