Compliance & Risk Specialist Talent Network

$60–80/hrrate as listed

Mercor is building a standing pool of compliance and risk professionals to write, review, and grade AI model outputs on regulatory frameworks, controls testing, and risk assessment. This is an open application rather than a single project — you complete a profile, pass an AI screening interview, then get matched to labs' projects as they open, typically 15–30 hours per week at an observed $60–80/hr.

Summary, eligibility guidance and screening preparation are prepared by Sidequest from the platform's posting. Check the source listing before applying.

What the work actually involves

AI labs need compliance work product they can grade against. In practice that means you'll be asked to do things like draft a realistic scenario — a sanctions screening hit, a SOX control deficiency, a third-party risk questionnaire with gaps — and then produce the answer a competent practitioner would give, with the reasoning made explicit. Other tasks run the other direction: a model produces a risk memo or a control narrative, and you score it against a rubric, flag where it invented a regulatory citation, and write the correction. Expect a mix of task authoring, side-by-side response comparison, and written critique. The deliverable is usually prose plus structured judgments, not code.

What the screen looks for

Mercor's AI interview is conversational and follows up. It probes whether your resume claims hold under pressure — which frameworks you actually operated under, whether you owned a control or observed one, what your escalation call was when a finding was ambiguous. Vague answers about "managing compliance programs" get drilled. The other thing it measures is evaluation instinct: can you say why one answer is better than another in terms someone else could apply, rather than just asserting it. Regulatory precision matters — confidently misstating a rule or a threshold is a fast disqualifier, since catching exactly that failure mode in models is the job.

Logistics

Fully remote, largely asynchronous, with task queues rather than fixed shifts.
Typical engagements run 15–30 hours weekly; scope and duration vary by project.
$60–80/hr is the observed band for this category — actual rates are set per project and are not guaranteed by applying.
Applying joins a network. Matching is rolling, so there may be a gap between verification and your first invitation.
You'll confirm work location during onboarding; some client projects have jurisdictional constraints.

What they look for

Professional experience in regulatory compliance — AML/KYC, SOX, GDPR, sanctions, or sector-specific frameworks
Hands-on risk assessment and mitigation work, including risk register and control design
Internal controls testing or audit background (Big 4, in-house second/third line, or regulator side)
Clear written analysis — able to justify a judgment in a way another reviewer can reproduce
Comfort working independently and asynchronously with minimal supervision
Relevant credential (CAMS, CRCM, CIA, CISA, CRISC, JD, or equivalent) is a plus, not required

Before you apply

Would you pass this screen?

Drawn from what this listing actually requires. Answered in your browser — nothing is sent to us, and we do not store your answers.

Do you have at least three years of professional work experience in regulatory compliance, risk assessment, internal controls, or audit?
Compliance professional experience · required
Do you have a reliable internet connection and a dedicated workspace to work independently from home?
Remote work setup · required
Are you legally authorized to work in the United States (or in the country in which you will be located)?
Right to work · required

0 of 3 answered

Included with this listing

Interview prep — 10 questions

Matched to what this platform's screening actually measures. Answer each out loud in 60–90 seconds: claim → concrete example → implication.

What it tests: Whether the candidate has hands-on experience translating regulatory frameworks into operational practice, not just theoretical knowledge of compliance standards.
A strong answer: Name a specific framework (SOX, GDPR, HIPAA, ISO 27001, etc.), describe its key control pillars, and give a concrete example of how you designed or executed a control or audit procedure to meet it.
Where people lose it: Listing frameworks by name without explaining what they actually require or how you personally made them work—signals the candidate knows compliance labels but not the work.