Governance, Risk & Compliance (GRC) Analyst

Alignerr; Deutschland; Remote; EUR 34,000 - 83,000; Full time

Job summary

Alignerr is seeking an experienced GRC Analyst to help build and evaluate AI systems that reason about governance, risk, and compliance. This remote, hourly-contract role offers flexible scheduling for 10–40 hours per week.

You will review policies, assess frameworks (SOC 2, ISO 27001, NIST, PCI-DSS), and generate high-quality training data to improve AI decision-making. Strong written communication and independent work style are essential.

Qualifications

• 2+ years of hands-on experience in GRC, compliance, risk management, or information security.
• Familiarity with SOC 2, ISO 27001, NIST CSF, PCI-DSS, or similar frameworks.
• Ability to read and critique policy documents and audit reports.
• Detail-oriented with strong written reasoning.
• Self-motivated and reliable when working independently.

Responsibilities

• Review security policies, controls, and procedures to evaluate AI responses.
• Assess and classify compliance scenarios involving major frameworks.
• Evaluate risk statements, control mappings and audit-style documentation for accuracy.
• Generate and validate training data to help AI reason about GRC topics.
• Provide structured, precise feedback using defined evaluation criteria.

Skills

GRC experience

Policy / audit analysis

Independent work

Job description

Governance, Risk & Compliance (GRC) Analyst (AI Training)

About The Role

We're looking for experienced GRC professionals to help build and evaluate AI systems that reason about security policy, compliance, and risk. Your real-world expertise will directly shape how frontier AI models understand and navigate the complex landscape of governance, risk, and compliance — making a meaningful impact on how AI handles security decisions.

• Organization: Alignerr
• Type: Hourly Contract
• Location: Remote
• Commitment: 10–40 hours/week

What You'll Do

• Review and analyze security policies, controls, and procedures to evaluate AI-generated responses
• Assess and classify compliance scenarios involving frameworks like SOC 2, ISO 27001, NIST, and others
• Evaluate risk statements, control mappings, and audit-style documentation for accuracy and qualityGenerate and validate training data that helps AI reason correctly about GRC topics
• Provide structured, precise feedback using defined evaluation criteria
• Work independently and asynchronously on your own schedule

Who You Are

• 2+ years of hands-on experience in GRC, compliance, risk management, or information security
• Solid familiarity with one or more major frameworks — SOC 2, ISO 27001, NIST CSF, PCI-DSS, or similar
• Comfortable reading, interpreting, and critiquing policy documents, audit reports, and control documentation
• Detail-oriented with strong written reasoning skills
• Self-motivated and reliable when working independently

Nice to Have

• Experience with data annotation, data quality review, or AI evaluation workflows
• Background in security auditing, risk consulting, or compliance program management
• Familiarity with AI systems or interest in how AI handles complex reasoning tasks

Why Join Us

• Work directly on frontier AI projects with leading research labs
• Fully remote and flexible — work on your own schedule
• Freelance perks: autonomy, variety, and global collaboration
• Contribute to meaningful work that shapes how AI understands security and risk
• Potential for ongoing work and contract extension