Requirements
Requires 5+ years in cybersecurity GRC, IT audit, or information security compliance, with direct ownership of SOC 2, ISO 27001, or NIST framework certification work. Must have hands-on experience writing or reviewing risk assessments, control matrices, and vendor security questionnaires against a named regulatory or audit framework. Requires expert-level document, spreadsheet, and slide craftsmanship, with excellent written communication and attention to detail.
Description
About This OpportunityWe're working with a leading foundational AI lab to find experienced cybersecurity and IT GRC specialists who can help train their latest language model on professional document, spreadsheet, and slide deck tasks.We're looking for cybersecurity governance, risk, and compliance professionals with 5+ years in cybersecurity governance, risk management, and compliance, IT audit, or information security to create, evaluate, and refine AI-generated documents, spreadsheets, and slide decks across core workflows: SOC 2 and ISO 27001 audit readiness documentation, security risk assessment and control matrices, vendor and third-party security due diligence questionnaires, incident response and breach notification reports, policy and control framework mapping documents, and board-level security posture and risk dashboards.Compensation: $90/hourCommitment: Flexible, 5-20 hours per week (or more if desired)Location: Fully remote, work on your own scheduleStart date: ASAPQualifications 5+ years in cybersecurity GRC, IT audit, or information security compliance, with direct ownership of SOC 2, ISO 27001, or NIST framework certification work Hands-on experience writing or reviewing risk assessments, control matrices, and vendor security questionnaires against a named regulatory or audit framework Expert-level document, spreadsheet, and slide craftsmanship, with excellent written communication and attention to detailAbout EthosEthos is a new expert network built by a McKinsey/SoftBank/DeepMind team and backed by world-leading investors like General Catalyst. We connect experts with investors and consultancies for paid expert calls, speaking engagements, and advisory opportunities.Key Requirements5+ years in cybersecurity GRC, IT audit, or information security compliance, with direct ownership of SOC 2, ISO 27001, or NIST framework certification workHands-on experience writing or reviewing risk assessments, control matrices, and vendor security questionnaires against a named regulatory or audit frameworkExpert-level document, spreadsheet, and slide craftsmanship, with excellent written communication and attention to detail