Deputy Chief Information Security Officer - Bank @Mercury

Overview

The role involves serving as the Deputy Chief Information Security Officer at Mercury, a fintech company responsible for overseeing the bank-entity scope of Mercury's 2LOD Information Security program. This position focuses on maintaining a continuously examiner-ready program through coherent policies, evidenced controls, and incident response protocols.

Key Responsibilities

• Manage the bank-entity 2LOD InfoSec program, covering governance, policy, risk, and oversight.
• Handle examiner posture by coordinating responses to OCC, FFIEC, FDIC, and FRB inquiries.
• Lead remediation of identified FFIEC IT control deficiencies to prepare for examinations.
• Maintain and develop the bank-scoped policy architecture, including approval processes.
• Work with the Chief Risk Officer on business continuity, resilience, and recovery planning.
• Manage relationships with internal and external auditors and assurance assessors.
• Ensure third-party risk management meets compliance for critical service providers.
• Coach and develop the governance, risk, and compliance (GRC) sub-team.

Requirements

• 8+ years in Information Security, with at least 3 years in a regulated banking environment.
• Deep understanding of FFIEC and OCC regulations.
• Experience interacting with examiners from OCC, FDIC, or Federal Reserve.
• Ability to create comprehensive policies and supporting documentation.
• Strong operating discipline with experience in maintaining control evidence and risk registers.
• Knowledge of the three-lines-of-defense model.

Benefits

The compensation package includes base salary, equity (stock options/RSUs), and comprehensive benefits. Salary ranges for this role are competitive within the industry.

Location

This position can be remote within the United States or based in San Francisco, CA, New York, NY, or Portland, OR.

How to Apply

Please submit your application through the provided link.

Deadline

No specific deadline is mentioned.