Expert Opportunity - Senior GRC Analyst ($90/hr, up to $1,800/week)

Ethos; New York (NY); Remote; USD 117,000 - 131,000; Part time

Job summary

Ethos is seeking experienced senior GRC analysts to help train and refine AI-generated documents, spreadsheets, and slide decks across SOC 2, ISO 27001, and NIST frameworks. This remote, flexible role requires 5+ years in cybersecurity governance, risk management, and compliance, with hands-on experience in risk assessments and vendor security questionnaires.

Compensation is $90/hour with a flexible commitment of 5-20 hours per week, allowing you to work on your own schedule. Start date ASAP.

Qualifications

• 5+ years in cybersecurity GRC, IT audit, or information security compliance with direct ownership of SOC 2, ISO 27001, or NIST framework work.
• Hands-on experience writing or reviewing risk assessments, control matrices, and vendor security questionnaires.

Responsibilities

• Create, evaluate, and refine AI-generated documents, spreadsheets, and slide decks across SOC 2, ISO 27001, and NIST frameworks.
• Assist in audit readiness documentation and security posture dashboards for board-level oversight.
• Collaborate with the AI lab to ensure documentation quality and regulatory alignment.

Skills

GRC governance

SOC 2 / ISO 27001

Risk assessment

Vendor security

Written communication

Job description

About This Opportunity

We're working with a leading foundational AI lab to find experienced senior GRC analysts who can help train their latest language model on professional document, spreadsheet, and slide deck tasks.

About This Opportunity

We're working with a leading foundational AI lab to find experienced senior GRC analysts who can help train their latest language model on professional document, spreadsheet, and slide deck tasks.

We're looking for senior GRC analysts with 5+ years in cybersecurity governance, risk management, and compliance, IT audit, or information security to create, evaluate, and refine AI-generated documents, spreadsheets, and slide decks across core workflows: SOC 2 and ISO 27001 audit readiness documentation, security risk assessment and control matrices, vendor and third-party security due diligence questionnaires, incident response and breach notification reports, policy and control framework mapping documents, and board-level security posture and risk dashboards.

Compensation: $90/hour

Commitment: Flexible, 5-20 hours per week (or more if desired)

Location: Fully remote, work on your own schedule

Start date: ASAP

Qualifications

• 5+ years in cybersecurity GRC, IT audit, or information security compliance, with direct ownership of SOC 2, ISO 27001, or NIST framework certification work
• Hands-on experience writing or reviewing risk assessments, control matrices, and vendor security questionnaires against a named regulatory or audit framework
• Expert-level document, spreadsheet, and slide craftsmanship, with excellent written communication and attention to detail

About Ethos

Ethos is a new expert network built by a McKinsey/SoftBank/DeepMind team and backed by world-leading investors like General Catalyst. We connect experts with investors and consultancies for paid expert calls, speaking engagements, and advisory opportunities.

Key Requirements

• 5+ years in cybersecurity GRC, IT audit, or information security compliance, with direct ownership of SOC 2, ISO 27001, or NIST framework certification work
• Hands-on experience writing or reviewing risk assessments, control matrices, and vendor security questionnaires against a named regulatory or audit framework
• Expert-level document, spreadsheet, and slide craftsmanship, with excellent written communication and attention to detail