Security GRC Lead

About Mercor Mercor's mission is to organize human intelligence to power the AI economy. We're a leading AI data company, building the layer between human expertise and frontier models. Millions of domain experts on the platform are paid over $4 million per day to train frontier AI models.

Mercor's APEX benchmark family measures AI's real-world impact on professional work. Mercor Enterprise brings this same infrastructure to Fortune 500 companies: helping companies capture how their best people actually work, translating that expertise directly back into agents.

Mercor is creating a new category of work where expertise powers AI advancement. Achieving this requires an ambitious, fast-paced and deeply committed team. You’ll work alongside researchers, operators, and AI companies at the forefront of shaping the systems that are redefining society.

Mercor is a profitable Series C company valued at $10 billion. We work in-person five days a week in our San Francisco, NYC, or London offices.

Role Description You'll be the first GRC hire at a company that processes some of the most sensitive data on earth: training data, evals, and human-feedback pipelines for the frontier AI labs, plus payments and KYC for 300K+ experts. Compliance posture is a sales gate for every $50M+ contract Mercor signs.

The audit calendar never ends. This is not an audit-theater role. You'll own the operating cadence of a continuously-audited company: continuous SOC 2 monitoring in Vanta, the active ISO 27001 buildout, an annual KPMG-style customer audit every quarter, and a sub-48-hour questionnaire SLA.

You'll write controls in code where it makes sense, push back on tools that fight you, and own the artifacts that close enterprise deals. We use AI heavily in our own GRC work - Vanta has an MCP, our questionnaire bank is queryable, evidence is automated where the framework allows it.

You should be comfortable using LLMs to draft, review, and respond at speed. If you've ever copy-pasted the same