Governance, Risk & Compliance (GRC) Analyst

About The Role

We're partnering with the world's leading AI research labs to build smarter, safer AI — and we need practitioners who know how compliance and risk management actually work inside real organizations. As a GRC Analyst, your real-world expertise will directly shape how AI systems understand security policies, evaluate risk, and reason through compliance scenarios. This isn't abstract work — your judgment and domain knowledge will influence the next generation of AI tools used by security and risk professionals worldwide.

What You'll Do

• Review and analyze security policies, controls, and procedures for accuracy and completeness
• Evaluate and classify compliance scenarios across frameworks like SOC 2, ISO 27001, and NIST
• Assess risk statements, control mappings, and audit-style documentation
• Generate and validate high-quality training and evaluation data for AI systems
• Apply structured reasoning to ambiguous or complex GRC scenarios
• Work independently and asynchronously on your own schedule

Who You Are

• 2+ years of hands-on experience in GRC, compliance, or risk management
• Familiar with one or more frameworks such as SOC 2, ISO 27001, NIST CSF, or similar
• Comfortable reading, interpreting, and critiquing policy and audit documentation
• Detail-oriented with strong written reasoning skills
• Self-motivated and reliable in a remote, async work environment

Nice to Have

• Experience with data annotation, data quality assurance, or AI evaluation workflows
• Background in information security, internal audit, or enterprise risk
• Familiarity with control testing or third-party risk assessments