Governance, Risk & Compliance; GRC) Analyst

We're partnering with the world's leading AI research labs to build smarter, safer AI - and we need practitioners who know how GRC actually works in the real world.

If you've spent time inside compliance programs, risk assessments, or security audits, your expertise is exactly what's needed to help train and evaluate the next generation of AI systems. This isn't a typical GRC role - it's an opportunity to apply your domain knowledge in a new and meaningful way, shaping how AI understands security policy, risk reasoning, and regulatory frameworks.

• Organization:
  Alignerr
• Type:
  Hourly Contract
• Location:
  
  Remote
• Commitment: 10-40 hours/week

• Review and analyze security policies, controls, and procedures for accuracy and completeness
• Evaluate compliance scenarios across frameworks like SOC 2, ISO 27001, and NIST
• Assess risk statements, control mappings, and audit-style documentation
• Generate and validate training and evaluation data used to improve AI reasoning in the GRC domain
• Provide structured, precise written feedback on real-world security and compliance scenarios

• 2+ years of hands-on experience in GRC, compliance, or risk management
• Familiar with one or more major frameworks - SOC 2, ISO 27001, NIST, HIPAA, PCI-DSS, or similar
• Comfortable reading and interpreting policy documents, audit findings, and control narratives
• Detail-oriented with strong written reasoning skills
• Able to work independently and manage your own schedule

• Experience with data annotation, data quality review, or AI evaluation workflows
• Background in information security, internal audit, or enterprise risk management
• Familiarity with GRC platforms or tooling (e.g., One Trust, Service Now, Archer)

• Work directly on frontier AI systems alongside top research labs
• Fully remote and flexible - work on your own schedule, 10-40 hours per week
• Freelance perks: autonomy, variety, and global collaboration
• Meaningful work that puts your real-world GRC expertise to use in a high-impact domain
• Potential for ongoing work and contract extension