Posted
15 Aug 2026
Last seen
15 Aug 2026
Location
United States
Lifecycle
fresh
Grade
C
About the jobMercor connects elite creative and technical talent with leading AI research labs. Headquartered in San Francisco, our investors include Benchmark, General Catalyst, Peter Thiel, Adam D'Angelo, Larry Summers, and Jack Dorsey.Position: Security ExpertType:ContractCompensation:$90–$110/hourLocation:RemoteRole Responsibilities
Review simulated vendor SOC 2 reports, security questionnaires, and pen-test evidence against a buyer's security standard.
Catch scope mismatches and lapsed bridge letters that a surface-level review would miss.
Author step-level rubrics and golden responses capturing how an experienced security reviewer would judge a request or renewal.
Assess data-handling and sub-processor risk for vendors touching sensitive data.
Work independently and asynchronously to meet deadlines while improving AI model performance.
QualificationsMust-Have
8+ years of professional experience in security review, vendor risk management, or third-party risk (TPRM).
Hands-on experience evaluating SOC 2 reports, security questionnaires, and compliance evidence.
Strong written communication skills; comfortable producing structured, rubric-style feedback.
Preferred
Relevant security certification, such as CISSP or CISA.
Prior task-writing, rubric-authoring, or AI-training data experience.
Application Process (Takes 20–30 mins to complete)
Upload resume
AI interview based on your resume
Submit form
Resources & Support
For details about the interview process and platform information, please check:
For any help or support, reach out to:
PS: Our team reviews applications daily. Please complete your AI interview and application steps to be considered for this opportunity.Originally posted on Himalayas
Review simulated vendor SOC 2 reports, security questionnaires, and pen-test evidence against a buyer's security standard.
Catch scope mismatches and lapsed bridge letters that a surface-level review would miss.
Author step-level rubrics and golden responses capturing how an experienced security reviewer would judge a request or renewal.
Assess data-handling and sub-processor risk for vendors touching sensitive data.
Work independently and asynchronously to meet deadlines while improving AI model performance.
QualificationsMust-Have
8+ years of professional experience in security review, vendor risk management, or third-party risk (TPRM).
Hands-on experience evaluating SOC 2 reports, security questionnaires, and compliance evidence.
Strong written communication skills; comfortable producing structured, rubric-style feedback.
Preferred
Relevant security certification, such as CISSP or CISA.
Prior task-writing, rubric-authoring, or AI-training data experience.
Application Process (Takes 20–30 mins to complete)
Upload resume
AI interview based on your resume
Submit form
Resources & Support
For details about the interview process and platform information, please check:
For any help or support, reach out to:
PS: Our team reviews applications daily. Please complete your AI interview and application steps to be considered for this opportunity.Originally posted on Himalayas