Deputy CISO – Bank at Mercury, SF/NY/Portland/Remote

Overview

Mercury is seeking an experienced Deputy Chief Information Security Officer to own the bank-entity scope of our 2LOD Information Security program. As the operating second to the CISO, you will be responsible for ensuring the program is examiner-ready by default, with a focus on coherent policy architecture, evidenced controls, and a credible gap-remediation track record.

Responsibilities

• Own the bank-entity scope of Mercury’s 2LOD Information Security program
• Ensure the program is examiner-ready by default, with a focus on coherent policy architecture and evidenced controls
• Develop and maintain a tested incident response program with documented exercise history
• Collaborate with OCC examiners, FFIEC IT audit teams, the Chief Risk Officer, and the board’s risk committee to ensure program effectiveness
• Provide credible gap-remediation track record and status updates on control inventory
• Answer for every line in our policies and every status in our control inventory

Requirements

• Experience in information security, preferably in a banking or fintech environment
• Strong understanding of 2LOD Information Security programs and examiner readiness
• Proven track record of building and defending information security programs
• Excellent communication and collaboration skills, with ability to sit across the table from examiners and executives
• Strong policy architecture and control inventory management skills

Benefits

As a Deputy Chief Information Security Officer at Mercury, you will have the opportunity to work with a talented team of professionals who are passionate about information security. You will also receive a competitive salary (estimated 50-80 LPA) and benefits package.

Apply

If you are a motivated and experienced information security professional looking for a new challenge, please submit your application to join our team as a Deputy Chief Information Security Officer.