Governance, Risk & Compliance (GRC) Analyst (AI Training)
About The Role:
We're partnering with the world's leading AI research labs to build smarter, safer AI — and we need practitioners who know how GRC actually works in the real world. If you've spent time inside compliance programs, risk assessments, or security audits, your expertise is exactly what's needed to help train and evaluate the next generation of AI systems. This isn't a typical GRC role — it's an opportunity to apply your domain knowledge in a new and meaningful way, shaping how AI understands security policy, risk reasoning, and regulatory frameworks.
Organization: Alignerr
Type: Hourly Contract
Location: Remote
Commitment: 10–40 hours/week
What You'll Do:
Review and analyze security policies, controls, and procedures for accuracy and completeness
Evaluate compliance scenarios across frameworks like SOC 2, ISO 27001, and NIST
Assess risk statements, control mappings, and audit-style documentation
Generate and validate training and evaluation data used to improve AI reasoning in the GRC domain
Provide structured, precise written feedback on real-world security and compliance scenarios
Who You Are: 2+ years of hands-on experience in GRC, compliance, or risk management
Familiar with one or more major frameworks — SOC 2, ISO 27001, NIST, HIPAA, PCI-DSS, or similar
Comfortable reading and interpreting policy documents, audit findings, and control narratives
Detail-oriented with strong written reasoning skills
Able to work independently and manage your own schedule
Nice to Have: Experience with data annotation, data quality review, or AI evaluation workflows
Background in information security, internal audit, or enterprise risk management
Familiarity with GRC platforms or tooling (e.g., OneTrust, ServiceNow, Archer)
Why Join Us: Work directly on frontier AI systems alongside top research labs
Fully remote and flexible — work on your own schedule, 10–40 hours per week
Freelance perks: autonomy, variety, and global collaboration
Meaningful work that puts your real-world GRC expertise to use in a high-impact domain
Potential for ongoing work and contract extension
