Governance, Risk & Compliance (GRC) Analyst

Alignerr; Vancouver; On-site; CAD 48,000 - 90,000; Full time

Benefits offered by this job

Autonomy

Global collaboration

Flexible schedule

Job summary

Alignerr is seeking a Governance, Risk & Compliance (GRC) Analyst to help train AI systems on how compliance, risk management, and security policies work in real organizations. This is a remote, hourly contract role designed for 10–40 hours per week.

You will review security policies, assess controls, and map them to SOC 2, ISO 27001, and NIST, while generating AI training data and evaluating edge cases with precision.

Qualifications

• 2+ years of hands-on GRC, compliance, or risk management experience.
• Solid knowledge of SOC 2, ISO 27001, and NIST.
• Ability to read and reason about policy and audit documentation.
• Detail-oriented with precise written communication.

Responsibilities

• Review and analyze security policies, controls, and compliance procedures.
• Evaluate compliance scenarios across SOC 2, ISO 27001, and NIST.
• Assess risk statements, mappings, and audit-style docs for accuracy.
• Generate and validate training data for AI systems.
• Identify gaps and edge cases in policies and controls.

Skills

GRC experience

Policy analysis

SOC 2

ISO 27001

NIST

Audit documentation

Job description

Governance, Risk & Compliance (GRC) Analyst (AI Training)

About The Role

We partner with the world's leading AI research teams and labs to build and train cutting-edge AI models. Right now, we're looking for experienced GRC professionals to help us teach AI how compliance, risk management, and security policy actually work inside real organizations. This isn't a typical compliance role — you'll be working at the frontier of AI development, using your hard-earned expertise to shape how next-generation systems reason about security frameworks, audit processes, and risk controls. Your real-world knowledge becomes the foundation that makes AI smarter and more trustworthy.

• Organization: Alignerr
• Type: Hourly Contract
• Location: Remote
• Commitment: 10–40 hours/week

What You'll Do

• Review and analyze security policies, controls, and compliance procedures
• Evaluate real-world compliance scenarios across frameworks like SOC 2, ISO 27001, and NIST
• Assess risk statements, control mappings, and audit-style documentation for accuracy and completeness
• Generate and validate high-quality training and evaluation data for AI systems
• Apply your practitioner knowledge to identify gaps, ambiguities, and edge cases that only an experienced professional would catch

Who You Are

• 2+ years of hands-on experience in GRC, compliance, or risk management
• Solid working knowledge of SOC 2, ISO 27001, NIST, or similar frameworks
• Comfortable reading, interpreting, and reasoning about policy and audit documentation
• Detail-oriented with clear, precise written communication
• Self-motivated and able to work independently on an asynchronous schedule

Nice to Have

• Experience with data annotation, data quality, or AI evaluation workflows
• Background in information security, cybersecurity, or enterprise risk
• Familiarity with multiple compliance frameworks across different industries

Why Join Us

• Work directly on frontier AI systems alongside top research labs
• Fully remote and flexible — work on your own schedule, 10 to 40 hours per week
• Freelance perks: autonomy, variety, and global collaboration
• Put your domain expertise to use in a genuinely novel and impactful way
• Potential for ongoing work and contract extension