Vendor Risk Specialist - Fully Remote | Upto $110/Hr

Mercor; Xico; Remote; MXN 2.305.000 - 2.817.000; Vollzeit

Zusammenfassung

Mercor is seeking a Security Expert for a contract role to review vendor security documentation, assess data-handling risks, and author rubric-based feedback. The ideal candidate will have extensive SOC 2 experience and strong written communication skills.

The position is remote with a focus on independent, deadline-driven work to support AI model performance. Applicants should bring 8+ years of security review or TPRM experience and hold CISSP or CISA certifications.

Qualifikationen

• 8+ years of professional experience in security review, vendor risk management, or third‑party risk (TPRM).
• Hands-on experience evaluating SOC 2 reports, security questionnaires, and compliance evidence.
• Strong written communication skills; comfortable producing structured, rubric-style feedback.

Aufgaben

• Review simulated vendor SOC 2 reports, security questionnaires, and pen-test evidence against a buyer's security standard.
• Catch scope mismatches and lapsed bridge letters that a surface-level review would miss.
• Author step-level rubrics and golden responses capturing how an experienced security reviewer would judge a request or renewal.
• Assess data-handling and sub-processor risk for vendors touching sensitive data.
• Work independently and asynchronously to meet deadlines while improving AI model performance.

Kenntnisse

8+ years experience

SOC 2 evaluation

Technical writing

Ausbildung

CISSP

CISA

Jobbeschreibung

About the job

Mercor connects elite creative and technical talent with leading AI research labs. Headquartered in San Francisco, our investors include Benchmark, General Catalyst, Peter Thiel, Adam D'Angelo, Larry Summers, and Jack Dorsey.

Position: Security Expert
Type: Contract
Compensation: $90–$110/hour
Location: Remote

Role Responsibilities

• Review simulated vendor SOC 2 reports, security questionnaires, and pen-test evidence against a buyer's security standard.
• Catch scope mismatches and lapsed bridge letters that a surface-level review would miss.
• Author step-level rubrics and golden responses capturing how an experienced security reviewer would judge a request or renewal.
• Assess data-handling and sub-processor risk for vendors touching sensitive data.
• Work independently and asynchronously to meet deadlines while improving AI model performance.

Qualifications

Must-Have

• 8+ years of professional experience in security review, vendor risk management, or third-party risk (TPRM).
• Hands-on experience evaluating SOC 2 reports, security questionnaires, and compliance evidence.
• Strong written communication skills; comfortable producing structured, rubric-style feedback.

Preferred

• Relevant security certification, such as CISSP or CISA.
• Prior task-writing, rubric-authoring, or AI-training data experience.

Resources & Support

• For details about the interview process and platform information, please check: https://talent.docs.mercor.com/welcome
• For any help or support, reach out to: [e-mail]