← All jobs

Cybersecurity / IT GRC Evaluator

Company: Mercor · Pay: $80–$120/hr · Location: Remote — Worldwide · Type: contractor · Posted: 2026-09-14

Apply now →

$80 - $120 / hr

The Convergence of Artificial Intelligence and Information Security: A New Era for GRC Experts

The information security, governance, risk, and compliance (GRC) landscape is experiencing an unprecedented evolution. For decades, seasoned cybersecurity architects, compliance officers, risk managers, and IT audit professionals have anchored enterprise security postures through rigorous frameworks, policy enforcement, and threat mitigation. Today, a technological frontier has opened that merges deep domain mastery with artificial intelligence training. As global enterprises increasingly rely on automated workflows and language models to draft security policies, evaluate vulnerability assessments, and construct audit reports, the demand for human expertise to train these systems has skyrocketed.

Platforms like Mercor are at the forefront of this transformation, connecting elite practitioners with frontier AI laboratories. Positions such as the Cybersecurity / IT GRC Evaluator offer a lucrative, flexible remote arrangement paying between $80 and $120 per hour. This role allows cybersecurity veterans to monetize their extensive analytical skills by auditing, grading, and perfecting AI-generated work products against real-world compliance and security benchmarks.

Comprehensive Breakdown of the Role and Core Responsibilities

Understanding the day-to-day expectations of an AI Evaluator in the IT GRC sector helps professionals gauge how their background translates into this unique contracting framework. Unlike traditional corporate consulting, which often involves endless slide decks, stakeholder alignment meetings, and traveling to client sites, this position focuses purely on high-level intellectual evaluation and precision auditing.

Key Responsibilities Include:

  • Rigorous Artifact Assessment: Review, analyze, and grade AI-generated documents, compliance spreadsheets, and security slide decks covering topics ranging from ISO 27001 and SOC 2 controls to NIST frameworks and GDPR compliance strategies.
  • Accuracy and Fact-Checking: Identify subtle technical inaccuracies, regulatory misinterpretations, policy gaps, and structural formatting errors in automated security deliverables.
  • Constructive Analytical Feedback: Write clear, precise, and structured feedback that retrains and aligns frontier AI models with enterprise-grade security standards and regulatory nuances.
  • Domain Quality Assurance: Ensure that the strategic risk assessments and governance models produced by artificial intelligence adhere strictly to industry best practices and legal compliance mandates.

Essential Requirements and Preferred Qualifications

Because these evaluations directly train the AI systems utilized by leading tech enterprises and financial institutions, the qualification criteria are designed to filter for seasoned domain authorities rather than generalists.

Must-Have Requirements:
  • 5+ Years of Professional Experience: Proven background in cybersecurity, information technology governance, risk management, compliance (IT GRC), or information security auditing.
  • English Proficiency: Native or professional fluency in English with exceptional technical and professional writing capabilities.
  • Software & Tool Mastery: High-level proficiency across Microsoft Office and Google Workspace ecosystems, with specialized expertise in presentation applications like Google Slides and Microsoft PowerPoint.

Preferred Qualifications: An advanced academic degree (Master’s or higher) from a reputable institution in cybersecurity, information systems, business administration, or a related discipline.

Contractual Flexibility, Remote Autonomy, and Global Payout Structure

One of the primary benefits that draws elite professionals to Mercor is the absolute freedom and transparency of its contracting model. Rather than locking yourself into a rigid 9-to-5 corporate structure, this engagement offers total professional autonomy:

  • Independent Contractor Status: Operate fully on your own schedule from any remote location worldwide (please note that H1-B or STEM OPT visa sponsorships are currently unsupported).
  • Dynamic Project Scalability: Projects adapt flexibly to institutional demands, granting you the ability to scale your workload up or down based on your personal availability and other professional commitments.
  • Reliable Weekly Compensation: Get paid weekly via secure global payment platforms like Stripe and Wise for all services rendered, eliminating cash-flow friction.
Maximize Your Earnings: Referral Bonuses & Incentive Structures

Beyond your hourly rate of $80–$120/hr, Mercor offers an exceptional referral program. You can earn significant bonuses (up to $480 per successful hire) when you refer qualified peers and industry connections into the talent network. Furthermore, for independent consultants building secondary revenue streams, these arrangements offer high yield per hour worked, allowing you to monetize your decades of compliance and risk management insight efficiently.

Why Cybersecurity and GRC Expertise is Uniquely Positioned for AI Training

Information security and GRC are fields defined by precision, regulatory compliance, risk quantification, and logical rigor. A minor oversight in a compliance framework or an improperly structured security policy can expose an enterprise to catastrophic vulnerabilities. Because artificial intelligence models are prone to hallucinations or superficial reasoning when handling complex regulatory frameworks, human experts are irreplaceable.

When you step into an evaluator role, you are not merely reviewing documents; you are actively shaping the safety, reliability, and security compliance of next-generation AI architectures. This work keeps your technical skills razor-sharp, exposes you to cutting-edge developments in machine learning governance, and compensates you handsomely for your specialized expertise.

Secure Your Contract and Take the Next Step Today

High-paying, flexible remote contracts with compensation reaching up to $120 per hour draw immense interest from across the global talent pool. As early applicant positions fill up rapidly, proactive professionals are encouraged to move quickly.

If you possess the required five-plus years of cybersecurity or IT GRC background and want to dictate your own schedule while guiding the future of artificial intelligence, now is the time to submit your application.

Responsibilities

  • Rigorous Artifact Assessment: Review, analyze, and grade AI-generated documents, compliance spreadsheets, and security slide decks covering topics ranging from ISO 27001 and SOC 2 controls to NIST frameworks and GDPR compliance strategies.
  • Accuracy and Fact-Checking: Identify subtle technical inaccuracies, regulatory misinterpretations, policy gaps, and structural formatting errors in automated security deliverables.
  • Constructive Analytical Feedback: Write clear, precise, and structured feedback that retrains and aligns frontier AI models with enterprise-grade security standards and regulatory nuances.
  • Domain Quality Assurance: Ensure that the strategic risk assessments and governance models produced by artificial intelligence adhere strictly to industry best practices and legal compliance mandates.

Qualifications

  • 5+ Years of Professional Experience: Proven background in cybersecurity, information technology governance, risk management, compliance (IT GRC), or information security auditing.
  • English Proficiency: Native or professional fluency in English with exceptional technical and professional writing capabilities.
  • Software & Tool Mastery: High-level proficiency across Microsoft Office and Google Workspace ecosystems, with specialized expertise in presentation applications like Google Slides and Microsoft PowerPoint.

Apply now →