Deputy Chief Information Security Officer

Mercury

Deputy Chief Information Security Officer at Mercury responsible for the bank's 2LOD Information Security program. Ensure security policies and examiner readiness for regulatory standards in a fintech environment.

Posted 6/3/2026full-timeRemote • California, New York, Oregon • 🇺🇸 United StatesLead💰 $242,700 - $353,950 per yearWebsite

About the role

Key responsibilities & impact

You will be the operating second to the CISO and own the bank-entity scope of Mercury's 2LOD Information Security program.
Keep the program examiner-ready by maintaining coherent policy architecture and evidenced controls
Own the examiner-ready narrative and coordinate the evidence for OCC, FFIEC, FDIC, and FRB examiner inquiries.
Lead remediation of identified FFIEC IT control deficiencies to ensure charter readiness.
Manage relationships with internal audit and external assessors.
Coach and grow the GRC sub-team while running a recurring training cadence.
Ensure third-party risk evidence holds up to bank-grade scrutiny.

Requirements

What you’ll need

8+ years in Information Security
3+ years inside a regulated bank, trust bank, or de novo bank charter effort
Deep FFIEC and OCC fluency
Direct examiner-facing experience
Policy and standards craft
Operating discipline
2LOD instinct
CISSP, CISM, or CRISC preferred

Benefits

Comp & perks

The total rewards package at Mercury includes base salary, equity (stock options), and benefits.
Our salary and equity ranges are highly competitive within the SaaS and fintech industry and are updated regularly using the most reliable compensation survey data for our industry.
New hire offers are made based on a candidate’s experience, expertise, geographic location, and internal pay equity relative to peers.
Mercury values diversity & belonging and is proud to be an Equal Employment Opportunity employer.
We are committed to providing reasonable accommodations throughout the recruitment process for applicants with disabilities or special needs.

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Information SecurityPolicy ArchitectureControl Evidence ManagementRemediation of IT Control DeficienciesThird-party Risk ManagementGRC (Governance, Risk, Compliance)Examiner-facing ExperienceStandards CraftOperating Discipline2LOD (Second Line of Defense) Instinct

Soft Skills

CoachingRelationship ManagementTrainingLeadership

Certifications

CISSPCISMCRISC