Remote GRC Cybersecurity Auditor (SOC 2/ISO 27001)

Ethos; España; Remote; EUR 93,000 - 128,000; Part time

Job summary

Ethos is seeking experienced cybersecurity GRC professionals to help train AI models on professional documents, spreadsheets, and slide decks. You will create, evaluate, and refine SOC 2, ISO 27001, and NIST-based deliverables, including risk assessments, control matrices, and due diligence questionnaires.

This fully remote role offers flexible 5-20 hours per week with ASAP start. You bring 5+ years in GRC or IT audit and excellent written communication for high-quality documentation across core

Qualifications

• 5+ years in cybersecurity GRC, IT audit, or information security compliance, with direct ownership of SOC 2, ISO 27001, or NIST framework certification work
• Hands-on experience writing or reviewing risk assessments, control matrices, and vendor security questionnaires against a named regulatory or audit framework
• Expert-level document, spreadsheet, and slide craftsmanship, with excellent written communication and attention to detail

Responsibilities

• Create, evaluate, and refine AI-generated documents, spreadsheets, and slide decks across core workflows: SOC 2, ISO 27001, and NIST frameworks
• Produce and review risk assessments, control matrices, and due diligence questionnaires for vendors and third parties

Skills

GRC expertise

SOC 2 ownership

ISO 27001 ownership

Documentation craftsmanship

Job description

Ethos is seeking experienced cybersecurity GRC professionals to help train AI models on professional documents, spreadsheets, and slide decks. You will create, evaluate, and refine SOC 2, ISO 27001, and NIST-based deliverables, including risk assessments, control matrices, and due diligence questionnaires.

This fully remote role offers flexible 5-20 hours per week with ASAP start. You bring 5+ years in GRC or IT audit and excellent written communication for high-quality documentation across core