Senior GRC Analyst (Remote) - AI Security & Compliance

Ethos; New York (NY); Remote; USD 117,000 - 131,000; Part time

Job summary

Ethos is seeking experienced senior GRC analysts to help train and refine AI-generated documents, spreadsheets, and slide decks across SOC 2, ISO 27001, and NIST frameworks. This remote, flexible role requires 5+ years in cybersecurity governance, risk management, and compliance, with hands-on experience in risk assessments and vendor security questionnaires.

Compensation is $90/hour with a flexible commitment of 5-20 hours per week, allowing you to work on your own schedule. Start date ASAP.

Qualifications

• 5+ years in cybersecurity GRC, IT audit, or information security compliance with direct ownership of SOC 2, ISO 27001, or NIST framework work.
• Hands-on experience writing or reviewing risk assessments, control matrices, and vendor security questionnaires.

Responsibilities

• Create, evaluate, and refine AI-generated documents, spreadsheets, and slide decks across SOC 2, ISO 27001, and NIST frameworks.
• Assist in audit readiness documentation and security posture dashboards for board-level oversight.
• Collaborate with the AI lab to ensure documentation quality and regulatory alignment.

Skills

GRC governance

SOC 2 / ISO 27001

Risk assessment

Vendor security

Written communication

Job description

Ethos is seeking experienced senior GRC analysts to help train and refine AI-generated documents, spreadsheets, and slide decks across SOC 2, ISO 27001, and NIST frameworks. This remote, flexible role requires 5+ years in cybersecurity governance, risk management, and compliance, with hands-on experience in risk assessments and vendor security questionnaires.

Compensation is $90/hour with a flexible commitment of 5-20 hours per week, allowing you to work on your own schedule. Start date ASAP.