Security Expert

DESCRIPTION

All application steps are reused whenever another role requires the same step, so you never have to upload your resume or take the same interview twice About the Role Mercor is building realistic, high-fidelity simulated environments to evaluate and train AI models on real-world procurement workflows for a leading spend-management technology company. We're looking for security and vendor-risk professionals to author and validate security-review tasks inside these simulated environments. Key Responsibilities Review simulated vendor SOC 2 reports, security questionnaires, and pen-test evidence against a buyer's security standard Catch scope mismatches and lapsed bridge letters that a surface-level review would miss Author step-level rubrics and golden responses capturing how an experienced security reviewer would judge a request or renewal Assess data-handling and sub-processor risk for vendors touching sensitive data Ideal

REQUIREMENTS

• ▸8+ years of professional experience in security review, vendor risk management, or third-party risk (TPRM)
• ▸Hands-on experience evaluating SOC 2 reports, security questionnaires, and compliance evidence
• ▸Strong written communication skills; comfortable producing structured, rubric-style feedback
• ▸Nice to Have
• ▸Relevant security certification, such as CISSP or CISA
• ▸Prior task-writing, rubric-authoring, or AI-training data experience
• ▸We consider all qualified applicants without regard to legally protected characteristics and provide reasonable accommodations upon request.
• ▸Contract and Payment Terms

More Mercor contracts