Senior SOC 2 Security Review Lead – Remote Contract

Mercor; Toronto; On-site; CAD 172,000 - 210,000; Full time

Job summary

Mercor is seeking a remote Security Expert on a contract basis to review vendor security evidence and ensure compliance with buyer standards. You will assess SOC 2 reports, risk factors, and data handling for sub‑processors while writing clear rubrics and golden responses for AI model training.

This role requires independent, asynchronous work and timely delivery. The ideal candidate brings 8+ years in security review or TPRM, hands‑on SOC 2 evaluation experience, and relevant certifications

Qualifications

• 8+ years of professional security review or third‑party risk (TPRM) experience.
• Hands‑on experience evaluating SOC 2 reports, security questionnaires, and compliance evidence.
• Prior task‑writing, rubric‑authoring, or AI‑training data experience (Preferred).

Responsibilities

• Review simulated vendor SOC 2 reports, security questionnaires, and pen-test evidence against a buyer's security standard.
• Catch scope mismatches and lapsed bridge letters that a surface-level review would miss.
• Author step‑level rubrics and golden responses capturing how an experienced security reviewer would judge a request or renewal.
• Assess data‑handling and sub‑processor risk for vendors touching sensitive data.
• Work independently and asynchronously to meet deadlines while improving AI model performance.

Skills

8+ years security review

SOC 2 evaluations

Vendor risk management

Education

CISSP

CISA

Job description

Mercor is seeking a remote Security Expert on a contract basis to review vendor security evidence and ensure compliance with buyer standards. You will assess SOC 2 reports, risk factors, and data handling for sub‑processors while writing clear rubrics and golden responses for AI model training.

This role requires independent, asynchronous work and timely delivery. The ideal candidate brings 8+ years in security review or TPRM, hands‑on SOC 2 evaluation experience, and relevant certifications