about the job

mercor connects elite creative and technical talent with leading ai research labs. Headquartered in san francisco, our investors include benchmark , general catalyst , peter thiel , adam d'angelo , larry summers , and jack dorsey .

position: security expert
type: contract
compensation: $90–$110/hour
location: remote

role responsibilities

- review simulated vendor soc 2 reports , security questionnaires, and pen-test evidence against a buyer's security standard.
- catch scope mismatches and lapsed bridge letters that a surface-level review would miss.
- author step-level rubrics and golden responses capturing how an experienced security reviewer would judge a request or renewal.
- assess data-handling and sub-processor risk for vendors touching sensitive data.




- work independently and asynchronously to meet deadlines while improving ai model performance .

qualifications

must-have

- 8+ years of professional experience in security review, vendor risk management, or third-party risk (tprm).
- hands-on experience evaluating soc 2 reports , security questionnaires, and compliance evidence.
- strong written communication skills; comfortable producing structured, rubric-style feedback.

preferred

- relevant security certification, such as cissp or cisa .
- prior task-writing, rubric-authoring, or ai-training data experience.

resources & support

- for details about the interview process and platform information, please check:
- for any help or support, reach out to:

#j-18808-ljbffr

📌 Vendor risk specialist - fully remote | upto $110/hr (México)
🏢 Mercor
📍 México