Senior Operational Risk Program Lead

Mercury; Portland (OR); Hybrid; USD 180,000 - 225,000; Full time

Benefits offered by this job

Equity (stock options/RSUs)

Benefits

Job summary

Mercury is building a high-impact Operational Risk program to protect its fast-growing fintech platform. You will own day-to-day operations, coordinate risk assessments, and drive reporting to leadership and the Board.

Partner with 1LOD, Compliance, InfoSec, and Internal Audit to shape the risk framework as Mercury scales toward broader banking capabilities. This builder role offers autonomy and high visibility.

Qualifications

• 8+ years in operational risk, compliance, or internal audit at a bank or fintech partnered with a bank.
• Hands-on ownership of an issues management or operational event program, including severity rating, escalation, and validation of remediation.
• Experience administering a GRC platform (LogicGate, Archer, or similar), including workflow configuration and reporting.
• Strong data skills: you turn raw issue and event data into trends leadership can act on.
• Familiarity with interagency and OCC expectations for operational risk management.
• You challenge constructively, with evidence, and keep strong relationships with the teams you oversee.
• You find, prioritize, and execute key projects independently, balancing program build with daily operations.

Responsibilities

• Set the risk and control assessment standard. Review and challenge first-line RCMs; independently test design and operating effectiveness on critical processes and issue findings.
• Oversee the operational event program: challenge first-line root cause, ratings and fixes; trend events across the enterprise.
• Own the centralized issues management program across operational events, incidents, testing and regulatory findings, from intake and triage through remediation tracking, validation, and closure
• Define enterprise KRIs and thresholds for each L2, tied to risk appetite, and aggregate first-line metrics into Board reporting.
• Partner with 1LOD teams, InfoSec, Compliance and model risk owners to collect inputs, challenge assessments and make sure risks are raised early.
• Provide second-line review and concurrence on high-risk new activities.
• Write and maintain the ORM standards, procedures and templates that first-line teams execute against.
• Support regulatory examinations, audits, and charter readiness reviews

Skills

GRC platforms

Data analysis

Risk management

Stakeholder alignment

Regulatory compliance

Root cause analysis

Tools

LogicGate

Archer

Job description

Mercury is building a high-impact Operational Risk program to protect its fast-growing fintech platform. You will own day-to-day operations, coordinate risk assessments, and drive reporting to leadership and the Board.

Partner with 1LOD, Compliance, InfoSec, and Internal Audit to shape the risk framework as Mercury scales toward broader banking capabilities. This builder role offers autonomy and high visibility.