Jobs › California › New York City › Business Continuity Management Lead
Business Continuity Management Lead
Mercury is hiring for the job of Business Continuity Management Lead, San Francisco, CA, New York · Remote. This is a Governance job in the governance, risk, and compliance field. Review the full details below and apply directly with Mercury.
About the Role
Mercury is seeking a Business Continuity Management (BCM) Lead to build and lead an enterprise-wide continuity program as we prepare to become a bank. As part of the Risk team, this leader will establish practical standards, clear accountability, and tested capabilities to maintain critical services and recover effectively from disruptions, with direct visibility to the CRO and senior leadership.
This role fills the need for a dedicated leader to coordinate BCM across the organization. The ideal candidate combines deep continuity and resilience expertise with the judgment to build a proportionate program in a fast-moving environment, working effectively with Engineering, Operations, Product, Information Security, Legal, Compliance, and business teams.
The BCM Lead will own the enterprise framework, coordination, oversight, and reporting. Business and technology owners will remain accountable for their continuity plans and recovery execution.Because this is a new program, the Lead will be hands-on in the initial build: facilitating the first round of BIAs and plans side by side with owners, running exercises, and driving identified gaps through remediation. This leader will also work closely with Engineering on technology disaster recovery and with relevant teams on incident response, crisis management, and third-party resilience.
Key Responsibilities
Develop and implement Mercury’s enterprise BCM framework, policies, standards, governance, and operating model, with a prioritized implementation roadmap aligned to bank-launch readiness and critical services.
Partner with business owners to identify critical services, conduct business impact analyses (customer, financial, operational, and regulatory), and map dependencies across people, processes, technology, facilities, and third parties, including single points of failure.
Establish recovery time objectives (RTOs) and recovery point objectives (RPOs), where applicable, with business and technology owners; challenge gaps between objectives and recovery capabilities.
Set standards for continuity plans and recovery procedures, and facilitate and support accountable owners in developing actionable plans and alternative operating arrangements.
Coordinate business continuity with technology disaster recovery, incident response, and crisis management, with clear activation criteria, escalation paths, and communications responsibilities.
Design and lead a risk-based exercise program, from tabletop simulations to end-to-end recovery tests, and drive lessons learned, remediation tracking, and verification that gaps are closed.
Partner with Third-Party Risk Management and vendor owners to assess critical provider recovery capabilities, contingency arrangements, and concentration dependencies.
Embed continuity considerations into new products, material business changes, and technology implementations.
Establish metrics and reporting that give management and relevant committees visibility into readiness, testing outcomes, material gaps, and overdue remediation.
Build and lead a growing BCM team, including hiring and developing analysts as the program scales over the next year.
Deliver role-based training and promote awareness of continuity responsibilities across the organization.
Support regulatory examinations and bank-launch readiness reviews with accurate documentation and evidence of recovery capability.
Qualifications
10+ years of experience in business continuity management, operational resilience, disaster recovery, or a related discipline within a fintech, financial institution, technology company, or other highly regulated environment.
Demonstrated experience building or materially enhancing an enterprise BCM program, including governance, implementation, testing, and reporting.
Strong skills in business impact analysis, critical-service identification, dependency mapping, and recovery objective development.
Experience developing actionable continuity plans and leading exercises that test recovery assumptions and expose gaps.
Sufficient technical fluency to work with Engineering on cloud services, system dependencies, data recovery, and technology disaster recovery.
Working knowledge of third-party risk management, including assessing critical vendor recovery capabilities, contingency arrangements and concentration risk.
Proven ability to drive cross-functional remediation through influence, with a clear view of where BCM oversight ends and business or technology ownership begins.
Excellent written and verbal communication skills, including the ability to explain readiness gaps and tradeoffs to senior leadership.
Experience managing a team of Business Continuity analysts.
Preferred Qualifications
Familiarity with banking supervisory expectations for business continuity, and operational resilience.
Experience operating in a company-building or bank-building environment.
Familiarity with recognized continuity standards, such as ISO 22301, and BCM tools for plan management, exercises, and issue tracking.
Relevant professional certification, such as CBCP or MBCI.
Leadership Attributes
Pragmatic, first-principles builder who turns ambiguous needs into clear priorities and designs a program that fits Mercury’s operations and scale.
Takes ownership and follows through from identified gaps to demonstrated recovery.
Collaborative, low-ego, and effective across the three lines of defense.
Calm under pressure and able to facilitate clear decisions during disruptions.
Able to challenge constructively, distinguish material gaps from theoretical concerns, and avoid over-engineering.
*Mercury is a fintech company, not an FDIC-insured bank. Banking services provided through Choice Financial Group and Column N.A., Members FDIC.
Mercury values diversity and belonging and is proud to be an Equal Employment Opportunity employer. All individuals seeking employment at Mercury are considered without regard to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, sexual orientation, or any other legally protected characteristic. We are committed to providing reasonable accommodations throughout the recruitment process for applicants with disabilities or special needs. If you need assistance, or an accommodation, please let your recruiter know once you are contacted about a role.
# -DR1
Total Rewards
The total rewards package at Mercury includes base salary, equity (stock options/RSUs), and benefits.
Our salary and equity ranges are highly competitive within the SaaS and fintech industry and are updated regularly using the most reliable compensation survey data for our industry. New hire offers are made based on a candidate’s experience, expertise, geographic location, and internal pay equity relative to peers.
Our target new hire base salary ranges for this role are the following strong:
US employees in New York City, Los Angeles, Seattle, or the San Francisco Bay Area:
span $163,000 span span $203,800 USD
US employees outside of New York City, Los Angeles, Seattle, or the San Francisco Bay Area:
span $146,700 span span $183,400 USD
Canadian employees (any location):
span $154,100 span span $192,600 CAD
Location and market context
This is a remote governance job, so it draws from a national talent pool rather than a single metro. Remote governance and compliance jobs reward candidates who can show they work effectively across time zones and distributed legal, security, and product teams. Confirm any residency, travel, or occasional-onsite expectations directly with Mercury.
About governance jobs
Governance jobs design the structures, policies, and oversight that keep complex programs accountable, coordinating across legal, risk, compliance, and technology. Jobs like this one are typically evaluated against frameworks such as governance frameworks, policy standards, and oversight and reporting practices.
How to position yourself for this governance job
Strong candidates emphasize policy and standard-setting, committee and stakeholder coordination, oversight reporting, and translating strategy into durable operating structures. In your resume and outreach, tie your experience to how Mercury would apply governance frameworks, policy standards, and oversight and reporting practices, and lead with concrete outcomes rather than duties.
Similar GRC jobs
- Threat Detection & Response Engineer III · True Anomaly · Long Beach, CA
- Senior Security Operations Engineer · Samsara · San Francisco, CA
- Senior Manager, Regulatory Affairs · Intuitive · Sunnyvale, CA
- Incident Response Product Security Engineer II · Esri · Redlands, CA
- PhD Intern, Security Engineer (2027) · Figma · San Francisco, CA, NY
- Staff / Senior Data Center Security Engineer · Anthropic · Friendly Travel Required San Francisco, CA · Remote
- Director, SOX Infrastructure · Anthropic · San Francisco, CA
- Supplier Security & Assurance, Security GRC · Anthropic · San Francisco, CA, WA New York City
More jobs at Mercury
- Model Risk Manager · Mercury · San Francisco, CA, New York · Remote
- Senior Risk Program Manager - Fraud & Disputes Enablement · Mercury · San Francisco, CA, New York · Remote
- Senior Operational Risk Manager · Mercury · San Francisco, CA, New York · Remote
- Lead Compliance Risk Manager, Product Compliance - AI · Mercury · San Francisco, CA, New York · Remote
- Senior Manager - Compliance Governance · Mercury · San Francisco, CA, New York · Remote
- Customer Support Manager - Risk · Mercury · San Francisco, CA, New York · Remote
More GRC jobs in San Francisco
- AI Agent Security Architect · Replit · Foster City, CA
- Audit, Security GRC · Anthropic · San Francisco, CA, WA New York City
- User Safety & Risk Operations Analyst - Global Response (Weekend Shift) · Openai · San Francisco
- Compliance Engineer · Figma · San Francisco, CA, NY •
- Risk & Insurance Specialist · Anthropic · San Francisco, CA
- Legal & Compliance Associate · AlphaSights · San Francisco
Hiring for Governance?
Reach candidates who are already searching for this role, not a general audience. Your posting appears on this page, in the job alerts, and across the GRC Careers network.
Post a job Pricing from $99 · About GRC Careers · Hiring toolkit
Want to be next in a job like this?
Jobs like Business Continuity Management Lead (remote) open regularly. Be first to know, privately. No current employer ever sees you looking.
Employer, or see something wrong with this posting? Report this posting and we will review it promptly.