Remote GRC Analyst — AI Compliance & Risk Evaluator

Alignerr Corp.; Dallas (TX); On-site; USD 55,000 - 103,000; Full time

Job summary

Alignerr is seeking a Governance, Risk & Compliance (GRC) Analyst to help train AI systems in real-world policy interpretation. You will review AI responses, assess policy alignment, and map controls across SOC 2, ISO 27001, and NIST frameworks while contributing to high-quality training data.

Ideal candidates bring 2+ years of GRC or security experience, strong written communication, and an ability to work independently in a remote, async setup.

Qualifications

• 2+ years of hands‑on experience in GRC, compliance, risk management, or information security.
• Solid working knowledge of frameworks such as SOC 2, ISO 27001, NIST CSF, PCI‑DSS, or similar.
• Comfortable reading and critiquing policy documentation and audit materials.
• Detail‑oriented with strong written communication and analytical reasoning skills.
• Self‑motivated and reliable working independently in an async environment.

Responsibilities

• Review and evaluate AI-generated responses to real-world compliance, risk, and security policy scenarios.
• Analyze security policies, controls, and procedures for accuracy and completeness.
• Classify and assess compliance scenarios across frameworks like SOC 2, ISO 27001, NIST CSF, PCI‑DSS, or similar.
• Evaluate risk statements, control mappings, and audit-style documentation.
• Generate and validate high-quality training and evaluation data for AI systems.
• Provide structured, precise written feedback on AI reasoning quality.

Skills

GRC experience

Policy review

Risk assessment

Audit materials understanding

Tools

Archer

ServiceNow

Vanta

Drata

Job description

Alignerr is seeking a Governance, Risk & Compliance (GRC) Analyst to help train AI systems in real-world policy interpretation. You will review AI responses, assess policy alignment, and map controls across SOC 2, ISO 27001, and NIST frameworks while contributing to high-quality training data.

Ideal candidates bring 2+ years of GRC or security experience, strong written communication, and an ability to work independently in a remote, async setup.