Security GRC Lead

Tech Stack

Responsibilities

• Own the Mercor compliance operating cadence, including SOC 2 Type 2 continuous monitoring and the ISO 27001 buildout.
• Build a customer-audit system to respond to frontier AI lab questionnaires and manage external audit sessions.
• Establish and scale the company's third-party risk management and vendor intake program.
• Define, draft, and manage the policy lifecycle, translating technical security configurations into compliance controls.
• Implement controls-as-code and leverage AI-native tooling for automated evidence collection and questionnaire response.

Benefits

• Equity
• Gym Membership
• Health Insurance
• Remote Work

Culture

Requirements