FewerJobs.
All jobs

Deputy Chief Information Security Officer - Bank

Mercury - San Francisco, CA, New York, NY, Portland, OR, or Remote within United States

Posted Jun 2, 2026

Benefits

Parental leave
Not verified not verified - timestamp not recorded
Non-birth-parent leave
Not verified not verified - timestamp not recorded
Family-building benefits
  • Fertility benefits: Not verified
  • Adoption assistance: Not verified
  • Surrogacy assistance: Not verified
Mental health support
Not verified
Relocation assistance
Not verified
Childcare support
Not verified
Learning budget
Not verified
Verification
Not verified
Salary
$243K-$319K From the posting source checked Jun 20, 2026
401(k) match
Not verified

Was this benefit information wrong? Tell us.

Role

Role function
Security From the posting source checked Jun 20, 2026
Seniority
Director Plus From the posting source checked Jun 20, 2026
Work mode
Remote From the posting source checked Jun 20, 2026
In-office days
0 days From the posting source checked Jun 20, 2026

Schedule

Shift type
Not verified
Weekend work
Not verified

Company

Equity
Offered From the posting source checked Jun 20, 2026

Application

Cover letter
Not verified
Assessment
Not verified
Deadline
Not stated

Where they hire

State eligibility is not yet verified.

About this role

Deputy Chief Information Security Officer - Bank San Francisco, CA, New York, NY, Portland, OR, or Remote within United States The role: You will be the operating second to the CISO and own the bank-entity scope of Mercury's 2LOD Information Security program. You'll be the person who keeps the program examiner-ready by default: coherent policy architecture, evidenced controls, a credible gap-remediation track record, and a tested incident response program with documented exercise history. This is not a research or strategy role. It is a build-and-defend role. You will sit across the table from OCC examiners, FFIEC IT audit teams, our Chief Risk Officer, and the board's risk committee, and you will be expected to answer for every line in our policies and every status in our control inventory. *Mercury is a fintech company, not an FDIC-insured bank. Banking services provided through Choice Financial Group and Column N.A., Members FDIC What you'll own: - Bank-entity 2LOD InfoSec program. Governance, policy, risk, and oversight scoped to the chartered bank. - Examiner posture. OCC, FFIEC, FDIC and FRB examiner inquiries; ownership of the examiner-ready narrative; coordination of the evidence. - FFIEC control remediation. Lead remediation of identified FFIEC IT control deficiencies to charter readiness ahead of the OCC pre-opening examination - Policy architecture. Carry the bank-scoped policy stack (Policy / Standard / Procedure), including ratification cycles, MRCC memos, and board approvals. - BC/DR. Partner with the Chief Risk Officer on bank continuity, resilience, and recovery, including tabletop exercises and full-scale drills. - Audit

Read the full description at job-boards.greenhouse.io. FewerJobs shows a preview and links to the original posting.

Apply at job-boards.greenhouse.io

Apply link not verified; last-live date unavailable.

What verified means

Verified means a displayed claim has field-level provenance to a source FewerJobs pulled: a government or employer source, or the original job posting. Posting-sourced facts are employer-stated and are labeled separately from government records.

Related jobs