Security GRC Lead

The role

You will own the security GRC operating cadence, including SOC 2, ISO 27001, and future frameworks. You will build a customer-audit machine, a third-party risk program, and automated controls-as-code.

What you will do

• Build the Mercor compliance operating cadence for SOC 2 Type 2 and ISO 27001
• Create a customer-audit machine to respond to customers
• Develop a third-party risk program including formal intake and recurring review
• Own the end-to-end policy lifecycle
• Implement controls-as-code using integrations and automated evidence collection
• Manage data-handling procedures including DSAR workflow and KMS scheduled destruction
• Develop the internal trust narrative including customer trust pages and disclosure templates

Required qualifications

• 7+ years in security GRC, compliance engineering, or audit
• At least 2 years owning a SOC 2 Type 2 program end-to-end at a company under audit by enterprise customers
• Shipped at least one ISO 27001 certification from kickoff to issued certificate
• Fluent in Vanta, Drata, Secureframe, or Sprinto at the integration and admin level
• Ability to translate cloud-security language to auditor language
• Ability to write controls as code or query evidence with SQL, Python, or shell
• Direct experience with SIG, CAIQ, custom enterprise questionnaires, on-site auditor sessions, and disclosure letters

Nice to have

• Built or operated a GRC program inside an AI lab, ML platform, or company serving frontier labs
• Familiar with AI-specific frameworks: NIST AI RMF, EU AI Act conformity, ISO 42001
• Experience with FedRAMP Moderate, HIPAA, PCI DSS, or SOC 2 + HITRUST dual scope
• Automated questionnaire response with an LLM
• Prior experience standing up a third-party risk program from zero
• Written a public trust page

Benefits

• Bi-annual performance bonus structure
• Generous equity grant vested over 4 years
• Up to $15k Relocation bonus
• $10K housing bonus if you live within 0.5 miles of our office
• $1.5K monthly stipend for meals
• Free Equinox membership
• $200 monthly laundry reimbursement
• $200 monthly personal wellness reimbursement
• Health, Dental, Vision insurance

About the company

Mercor builds infrastructure that enables frontier AI labs and enterprises to train, evaluate, and improve AI on real-world professional work. The company is profitable and recently raised a $750 million Series D at a $20 billion valuation.