Remote GRC Security Analyst — SOC 2/ISO 27001 Expert

Ethos; Singapore; On-site; SGD 134,000 - 182,000; Part time

Benefits offered by this job

Flexible hours

Remote work

Paid expert calls

Job summary

Ethos is seeking an experienced information security analyst to help train AI models on professional documents, spreadsheets, and slide decks. You will own governance, risk, and compliance tasks with direct ownership of SOC 2, ISO 27001, or NIST frameworks, and craft high-quality security documents for audits and due diligence.

The role is fully remote, offering flexible hours (5-20+ hours per week). Start date ASAP, compensation at $90/hour with a focus on precise, compliant outputs for complex

Qualifications

• 5+ years in cybersecurity governance, risk management, and compliance, IT audit, or information security.
• Hands-on experience drafting and reviewing risk assessments, control matrices, and vendor security questionnaires against a regulatory framework.
• Excellent written communication and attention to detail in documents, spreadsheets, and slides.

Responsibilities

• Create, evaluate, and refine AI-generated documents, spreadsheets, and slide decks across core workflows.
• Develop and maintain SOC 2, ISO 27001, and NIST alignment documentation.
• Produce board-level security posture and risk dashboards for stakeholders.

Skills

Cybersecurity GRC

IT audit

Information security compliance

SOC 2

ISO 27001

Job description

Ethos is seeking an experienced information security analyst to help train AI models on professional documents, spreadsheets, and slide decks. You will own governance, risk, and compliance tasks with direct ownership of SOC 2, ISO 27001, or NIST frameworks, and craft high-quality security documents for audits and due diligence.

The role is fully remote, offering flexible hours (5-20+ hours per week). Start date ASAP, compensation at $90/hour with a focus on precise, compliant outputs for complex