Vendor Risk Specialist - Fully Remote | Upto $110/hr

About the job

Mercor connects elite creative and technical talent with leading AI research labs. Headquartered in San Francisco, our investors include Benchmark , General Catalyst , Peter Thiel , Adam D'Angelo , Larry Summers , and Jack Dorsey .

Position: Security Expert
Type: Contract
Compensation: $90–$110/hour
Location: Remote
Role Responsibilities

- Review simulated vendor SOC 2 reports , security questionnaires, and pen-test evidence against a buyer's security standard.

- Catch scope mismatches and lapsed bridge letters that a surface-level review would miss.

- Author step-level rubrics and golden responses capturing how an experienced security reviewer would judge a request or renewal.

- Assess data-handling and sub-processor risk for vendors touching sensitive data.

- Work independently and asynchronously to meet deadlines while improving AI model performance .

Qualifications

Must-Have

- 8+ years of professional experience in security review, vendor risk management, or third-party risk (TPRM).

- Hands-on experience evaluating SOC 2 reports , security questionnaires, and compliance evidence.

- Strong written communication skills; comfortable producing structured, rubric-style feedback.

Preferred

- Relevant security certification, such as CISSP or CISA .

- Prior task-writing, rubric-authoring, or AI-training data experience.

Application Process (Takes 20–30 mins to complete)

- Upload resume

- AI interview based on your resume

- Submit form

Resources & Support

- For details about the interview process and platform information, please check:

- For any help or support, reach out to:

PS: Our team reviews applications daily. Please complete your AI interview and application steps to be considered for this opportunity.

Originally posted on Himalayas