Remote SOC 2 Security Review Expert (Contract)

Mercor; San Francisco (CA); Hybrid; MXN 2,243,000 - 2,742,000; Part time

Job summary

Mercor is seeking a Security Expert for a contract role focused on third-party risk and security review. This remote position requires evaluating SOC 2 reports, security questionnaires, and other evidence to ensure alignment with buyers' standards.

You'll craft rubric-style feedback, assess data-handling and sub-processor risk, and work asynchronously to meet deadlines while contributing to AI model improvements.

Qualifications

• 8+ years in security review, vendor risk management, or TPRM.
• Hands-on experience with SOC 2 reports and security questionnaires.
• Strong written communication; ability to produce rubric-style feedback.

Responsibilities

• Review SOC 2 reports and security questionnaires against buyer standards.
• Identify scope mismatches and outdated bridge letters.
• Author step-level rubrics and golden responses for reviewer judgments.
• Assess data-handling and sub-processor risk for vendors.
• Work independently and asynchronously to meet deadlines; support AI model improvements.

Skills

SOC 2 review

Vendor risk management

Rubric writing

Written communication

Education

CISSP or CISA certification

Job description

Mercor is seeking a Security Expert for a contract role focused on third-party risk and security review. This remote position requires evaluating SOC 2 reports, security questionnaires, and other evidence to ensure alignment with buyers' standards.

You'll craft rubric-style feedback, assess data-handling and sub-processor risk, and work asynchronously to meet deadlines while contributing to AI model improvements.