GRC Analyst

About This Role

This opportunity is for an experienced GRC analyst to train a leading foundational AI lab's latest language model on professional document, spreadsheet, and slide deck tasks. The role involves creating, evaluating, and refining AI-generated content for core cybersecurity workflows.

Responsibilities

• Create, evaluate, and refine AI-generated documents, spreadsheets, and slide decks across core workflows: SOC 2 and ISO 27001 audit readiness documentation, security risk assessment and control matrices, vendor and third-party security due diligence questionnaires, incident response and breach notification reports, policy and control framework mapping documents, and board-level security posture and risk dashboards

Requirements

• 5+ years in cybersecurity GRC, IT audit, or information security compliance, with direct ownership of SOC 2, ISO 27001, or NIST framework certification work
• Hands-on experience writing or reviewing risk assessments, control matrices, and vendor security questionnaires against a named regulatory or audit framework
• Expert-level document, spreadsheet, and slide craftsmanship, with excellent written communication and attention to detail

Important Details

• Commitment: Flexible, 5-20 hours per week (or more if desired)
• Start date: ASAP

About the Company

Ethos is a new expert network built by a McKinsey/SoftBank/DeepMind team and backed by world-leading investors like General Catalyst. It connects experts with investors and consultancies for paid expert calls, speaking engagements, and advisory opportunities.