Security Expert

About the Role

Mercor is building realistic, high-fidelity simulated environments to evaluate and train AI models on real-world procurement workflows for a leading spend-management technology company. We're looking for security and vendor-risk professionals to author and validate security-review tasks inside these simulated environments. Review simulated vendor SOC 2 reports, security questionnaires, and pen-test evidence against a buyer's security standard

What You'll Do

• Review simulated vendor SOC 2 reports, security questionnaires, and pen-test evidence against a buyer's security standard
• Catch scope mismatches and lapsed bridge letters that a surface-level review would miss
• Author step-level rubrics and golden responses capturing how an experienced security reviewer would judge a request or renewal
• Assess data-handling and sub-processor risk for vendors touching sensitive data

You're a Good Fit If You

• 8+ years of professional experience in security review, vendor risk management, or third-party risk (TPRM)
• Hands-on experience evaluating SOC 2 reports, security questionnaires, and compliance evidence
• Strong written communication skills; comfortable producing structured, rubric-style feedback
• Nice to Have

Role Highlights

Pay & Payout

Independent contractor engagement, fully remote. Mercor pays weekly via Stripe or Wise.

Opens Mercor in a new tab. You pay nothing; we may earn a referral fee.