First seen by our source: 20 days ago
Security Review Expert - SOC 2
@ Mercor
Toronto, Ontario
Overview
Mercor is hiring a remote contract Security Expert at $90–$110 per hour to review simulated vendor SOC 2 reports, security questionnaires and pen-test evidence against a buyer's security standard. The work includes authoring rubrics and golden responses for AI training and assessing data-handling and sub-processor risk. Candidates need 8+ years in security review, vendor risk or third-party risk.
Pay:
$90–$110 an hour
Responsibilities:
- Review vendor SOC 2 reports, security questionnaires and pen-test evidence against a buyer's standard
- Catch scope mismatches and lapsed bridge letters
- Author step-level rubrics and golden responses for AI training
- Assess data-handling and sub-processor risk for vendors
Requirements summary:
- 8+ years in security review, vendor risk or third-party risk
- Hands-on experience evaluating SOC 2 reports and compliance evidence
- Strong written communication and rubric-style feedback
- Preferred: CISSP or CISA certification
- Preferred: task-writing or AI-training data experience
Tools & skills
Source and dates
Source type not verified · manatal
- Employer posting date
- Not provided
- First seen by our source
- 2026-10-18
- Source record updated
- 2026-10-18
These dates describe the source record, not a live verification that the employer is still hiring. Check the original posting.
Job details
| Seniority | Senior |
| Department | IT |
| Experience | 8+ years |
| Travel | air: none · ground: none |
| Work setting | Home |
| Position | Mostly sitting |
| Physical demands | physical low · computer high |
| Languages | English |
Summary and details written by AI from the posting; the employer’s posting is the authority.
Mercor
Saved company profile
Historical company information from a saved The Jobs API profile (LinkedIn/Crunchbase fields). It is not live-verified; figures may have changed. Missing values remain unknown.
We connect human expertise with leading AI labs and enterprises to train frontier models.
Full company description
Mercor is defining the future of work. We connect human expertise with leading AI labs and enterprises to train frontier models.
- LinkedIn followers
- 654,507
- People associated on LinkedIn
- 5,250
- Reported office locations
- San Francisco, California 94105, US
- Business categories
- Employment
- Software
- Recruiting
- Data Collection and Labeling
- Artificial Intelligence (AI)
- Machine Learning
- Other recorded names
- Mercor
- Profile identifies a recruitment agency
- Yes
- Reported total investment
- 483,600,000
Currency and observation date were not supplied; this is not a current valuation or a funding round.
Mercor is defining the future of work. We connect human expertise with leading AI labs and enterprises to train frontier models.
| Field | Value |
|---|---|
| Industry | Software Development |
| Company size | 51-200 employees |
| Headquarters | San Francisco, California |
| Organization type | Privately Held |
| Year founded | 2023 |
| Open jobs on Jobsy | 1,626 |
| View page |
About the job
Mercor connects elite creative and technical talent with leading AI research labs. Headquartered in San Francisco, our investors include Benchmark, General Catalyst, Peter Thiel, Adam D'Angelo, Larry Summers, and Jack Dorsey.
Position: Security Expert
Type: Contract
Compensation: $90–$110/hour
Location: Remote
Role Responsibilities
- Review simulated vendor SOC 2 reports, security questionnaires, and pen-test evidence against a buyer's security standard.
- Catch scope mismatches and lapsed bridge letters that a surface-level review would miss.
- Author step-level rubrics and golden responses capturing how an experienced security reviewer would judge a request or renewal.
- Assess data-handling and sub-processor risk for vendors touching sensitive data.
- Work independently and asynchronously to meet deadlines while improving AI model performance.
Qualifications
Must-Have
- 8+ years of professional experience in security review, vendor risk management, or third-party risk (TPRM).
- Hands-on experience evaluating SOC 2 reports, security questionnaires, and compliance evidence.
- Strong written communication skills; comfortable producing structured, rubric-style feedback.
Preferred
- Relevant security certification, such as CISSP or CISA.
- Prior task-writing, rubric-authoring, or AI-training data experience.
Application Process (Takes 20–30 mins to complete)
- Upload resume
- AI interview based on your resume
- Submit form
Resources & Support
- For details about the interview process and platform information, please check: https://talent.docs.mercor.com/welcome
- For any help or support, reach out to: [email protected]
PS: Our team reviews applications daily. Please complete your AI interview and application steps to be considered for this opportunity.
Journal
Only you can see this. Kept on this device, and in your account when you sign in.