Senior Operational Risk Builder & Controls Lead

Mercury; United States; Remote; USD 180,000 - 225,000; Full time

Job summary

Mercury is seeking an experienced Operational Risk leader to own the day-to-day operation of the ORM program within its Risk organization. You will partner with Compliance, InfoSec, and Internal Audit, reporting to the Head of Operational Risk, and help shape a program as Mercury scales toward a bank-like environment.

You will drive centralized issues, events and regulatory findings, define enterprise KRIs, and deliver Board-ready reporting.

Qualifications

• 8+ years in operational risk, compliance, or internal audit in a bank or fintech partnered with a bank.
• Hands-on ownership of an issues management or operational event program, including severity rating and remediation validation.
• Experience administering a GRC platform, including workflow configuration and reporting.
• Strong data skills: turn raw issue and event data into actionable trends for leadership.
• Familiarity with interagency and OCC expectations for operational risk management.
• You challenge constructively, with evidence, and maintain strong relationships with teams you oversee.
• You identify, prioritize, and execute key projects independently, balancing program build with daily operations.

Responsibilities

• Set the risk and control assessment standard. Review and challenge first-line RCMs; independently test design and operating effectiveness on critical processes and issue findings.
• Oversee the operational event program: challenge first-line root cause, ratings and fixes; trend events across the enterprise.
• Own the centralized issues management program across operational events, incidents, testing and regulatory findings, from intake and triage through remediation tracking, validation, and closure
• Define enterprise KRIs and thresholds for each L2, tied to risk appetite, and aggregate first-line metrics into Board reporting.
• Partner with 1LOD teams, InfoSec, Compliance and model risk owners to collect inputs, challenge assessments and make sure risks are raised early.
• Provide second-line review and concurrence on high-risk new activities.
• Write and maintain the ORM standards, procedures and templates that first-line teams execute against.
• Support regulatory examinations, audits, and charter readiness reviews

Skills

Operational risk management

Data analysis

Stakeholder management

Regulatory knowledge

Root cause analysis

Tools

LogicGate

Archer

Job description

Mercury is seeking an experienced Operational Risk leader to own the day-to-day operation of the ORM program within its Risk organization. You will partner with Compliance, InfoSec, and Internal Audit, reporting to the Head of Operational Risk, and help shape a program as Mercury scales toward a bank-like environment.

You will drive centralized issues, events and regulatory findings, define enterprise KRIs, and deliver Board-ready reporting.