What the work involves

You receive AI-generated artifacts of the kind a security or compliance function actually produces: SOC 2 or ISO 27001 readiness assessments, control mappings across frameworks, risk registers with likelihood/impact scoring, vendor risk questionnaires, incident response policies, board-level security posture decks. Your job is to grade each one against a rubric and explain your scores in writing. That means catching the things a non-expert reviewer misses — a control cited under the wrong CIS or NIST 800-53 family, a risk treatment that doesn't follow from the stated risk appetite, an audit scope statement that quietly excludes the systems in question, a policy that reads well but contains no enforceable requirement.

Presentation quality counts as much as substance on this program. A slide deck with misaligned tables, inconsistent heat-map coloring, or a maturity model chart that doesn't match its own legend fails the rubric even if the underlying analysis is sound. Expect to spend real time in Google Slides and PowerPoint, and to be specific in your feedback about what is wrong and what correct would look like.

What the platform screens for

  • Verifiable depth. Mercor's screening interview probes your actual GRC work: which frameworks you've operated under, whether you've sat on the audited side or the auditor side, how you've handled a control that couldn't be met.
  • Rubric discipline. Evaluators who score on instinct rather than criteria get filtered out. The screen tests whether you can separate "I would have written this differently" from "this is wrong."
  • Written clarity. Feedback is the deliverable. Vague comments have no downstream value.
  • Honest availability. Task volume moves in waves; consistent weekly hours matter more than large one-off bursts.

Logistics

Fully remote, fully asynchronous, contractor engagement. You claim tasks from a queue and work them on your own schedule; most evaluators commit 10–20 hours a week, though some programs offer more. Pay is hourly, invoiced through the platform, and the $80–120/hr band reflects observed rates on comparable GRC programs rather than a guaranteed rate for any individual.