Governance, Risk & Compliance (GRC) Analyst

Alignerr Corp.; Germany; Remote; EUR 55,000 - 96,000; Part time

Job summary

Ideal candidates have 2+ years in GRC or information security, familiarity with SOC 2, ISO 27001, NIST CSF or PCI-DSS, and strong policy-analysis skills. This role is fully remote with 10–40 hours per week and flexible scheduling.

Qualifications

• 2+ years of hands-on experience in GRC, compliance, risk management, or information security.
• Familiarity with frameworks such as SOC 2, ISO 27001, NIST CSF, PCI-DSS or similar.
• Ability to read, interpret, and critique policy documents, audit reports, and control documentation.
• Detail-oriented with strong written reasoning skills.
• Self-motivated and reliable when working independently.

Responsibilities

• Review and analyze security policies, controls, and procedures to evaluate AI-generated responses
• Assess and classify compliance scenarios involving frameworks like SOC 2, ISO 27001, NIST CSF, PCI-DSS, or similar
• Evaluate risk statements, control mappings, and audit-style documentation for accuracy and quality
• Generate and validate training data that helps AI reason correctly about GRC topics
• Provide structured, precise feedback using defined evaluation criteria
• Work independently and asynchronously on your own schedule

Skills

GRC experience

Compliance familiarity

Risk management

Policy analysis

Audit documentation

Independent work

Job description

Governance, Risk & Compliance (GRC) Analyst (AI Training)

About The Role

We're looking for experienced GRC professionals to help build and evaluate AI systems that reason about security policy, compliance, and risk. Your real-world expertise will directly shape how frontier AI models understand and navigate the complex landscape of governance, risk, and compliance - making a meaningful impact on how AI handles security decisions.

• Organization: Alignerr
• Type: Hourly Contract
• Location: Remote
• Commitment: 10-40 hours/week

What You'll Do

• Review and analyze security policies, controls, and procedures to evaluate AI-generated responses
• Assess and classify compliance scenarios involving frameworks like SOC 2, ISO 27001, NIST, and others
• Evaluate risk statements, control mappings, and audit-style documentation for accuracy and quality
• Generate and validate training data that helps AI reason correctly about GRC topics
• Provide structured, precise feedback using defined evaluation criteria
• Work independently and asynchronously on your own schedule

Who You Are

• 2+ years of hands-on experience in GRC, compliance, risk management, or information security
• Solid familiarity with one or more major frameworks - SOC 2, ISO 27001, NIST CSF, PCI-DSS, or similar
• Comfortable reading, interpreting, and critiquing policy documents, audit reports, and control documentation
• Detail-oriented with strong written reasoning skills
• Self-motivated and reliable when working independently

Nice to Have

• Experience with data annotation, data quality review, or AI evaluation workflows
• Background in security auditing, risk consulting, or compliance program management
• Familiarity with AI systems or interest in how AI handles complex reasoning tasks

Why Join Us

• Work directly on frontier AI projects with leading research labs
• Fully remote and flexible - work on your own schedule
• Freelance perks: autonomy, variety, and global collaboration
• Contribute to meaningful work that shapes how AI understands security and risk
• Potential for ongoing work and contract extension