Remote GRC Security Risk Analyst (SOC 2/ISO 27001)

Ethos; Philippines; On-site; PHP 6,923,000 - 9,519,000; Part time

Job summary

Ethos is seeking security risk analysts to help train an AI language model on professional documents and risk governance tasks. You will write, review, and refine SOC 2, ISO 27001, and NIST related artifacts, risk assessments, control matrices, and vendor questionnaires. Remote work with flexible hours, ASAP start, 5-20 hours weekly.

You’ll demonstrate 5+ years in cybersecurity GRC or IT audit, exceptional written communication, and precise document craftsmanship for audit-ready deliverables.

Qualifications

• 5+ years in cybersecurity governance, risk management, or information security compliance.
• Experience owning SOC 2, ISO 27001, or NIST related work.
• Strong written communication and risk documentation capabilities.

Responsibilities

• Create, evaluate, and refine AI-generated risk docs, matrices, and vendor questionnaires.
• Support audit readiness activities across core frameworks (SOC 2, ISO 27001, NIST).

Skills

Cyber GRC

IT Audit

InfoSec Compliance

Job description

Ethos is seeking security risk analysts to help train an AI language model on professional documents and risk governance tasks. You will write, review, and refine SOC 2, ISO 27001, and NIST related artifacts, risk assessments, control matrices, and vendor questionnaires. Remote work with flexible hours, ASAP start, 5-20 hours weekly.

You’ll demonstrate 5+ years in cybersecurity GRC or IT audit, exceptional written communication, and precise document craftsmanship for audit-ready deliverables.