Remote Security Risk & GRC Analyst (SOC 2/ISO)

Ethos; Canada; On-site; CAD 147,000 - 197,000; Part time

Job summary

Ethos is seeking security risk analysts to help train AI models on professional documents, spreadsheets, and slide decks. Fully remote with flexible hours (5–20 per week) and an ASAP start. Compensation is $90/hour.

You will own SOC 2, ISO 27001, or NIST framework work, write risk assessments and vendor security questionnaires, and craft clear, high-quality documentation for security programs and board-level reports.

Qualifications

• 5+ years in cybersecurity GRC, IT audit, or information security compliance with SOC 2/ISO 27001/NIST work.
• Experience writing or reviewing risk assessments and vendor security questionnaires.
• Expert-level document, spreadsheet, and slide craftsmanship with strong writing.

Responsibilities

• Create, evaluate, and refine AI-generated security documents across SOC 2, ISO 27001, and NIST workflows.
• Develop risk assessments, control matrices, and vendor security questionnaires.
• Produce board-level security posture reports and dashboards with clear narratives.

Skills

Cybersecurity GRC

Risk assessments

Written communication

Job description

Ethos is seeking security risk analysts to help train AI models on professional documents, spreadsheets, and slide decks. Fully remote with flexible hours (5–20 per week) and an ASAP start. Compensation is $90/hour.

You will own SOC 2, ISO 27001, or NIST framework work, write risk assessments and vendor security questionnaires, and craft clear, high-quality documentation for security programs and board-level reports.