Vendor Risk Specialist Fully Remote

About the job

Mercor connects elite creative and technical talent with leading AI research labs. Headquartered in San Francisco our investors include Benchmark General Catalyst Peter Thiel Adam DAngelo Larry Summers and Jack Dorsey.

Position: Security Expert
Type: Contract
Compensation: $90$110/hour
Location: Remote

Role Responsibilities

• Review simulated vendor SOC 2 reports security questionnaires and pen-test evidence against a buyers security standard.
• Catch scope mismatches and lapsed bridge letters that a surface-level review would miss.
• Author step-level rubrics and golden responses capturing how an experienced security reviewer would judge a request or renewal.
• Assess data-handling and sub-processor risk for vendors touching sensitive data.
• Work independently and asynchronously to meet deadlines while improving AI model performance.

Qualifications

Must-Have

• 8 years of professional experience in security review vendor risk management or third-party risk (TPRM).
• Hands-on experience evaluating SOC 2 reports security questionnaires and compliance evidence.
• Strong written communication skills; comfortable producing structured rubric-style feedback.

Preferred

• Relevant security certification such as CISSP or CISA.
• Prior task-writing rubric-authoring or AI-training data experience.

Application Process (Takes 2030 mins to complete)

• Upload resume
• AI interview based on your resume
• Submit form

Resources & Support

• For details about the interview process and platform information please check:
• For any help or support reach out to:

PS: Our team reviews applications daily. Please complete your AI interview and application steps to be considered for this opportunity.

Employment Type : Full Time
Experience: years
Vacancy: 1