119K–166K USD / year
Third Party Risk Manager
OperationsWorkplace — United States, Canada
Published on 2026-11-06
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Help develop and operate Mercury’s third-party risk management program as the company prepares to become a bank. The role conducts risk assessments, provides second-line oversight, supports reporting, and contributes to program improvements across the third-party lifecycle.
About the company
Mercury provides banking and financial software for startups, combining business accounts, cards, and money-management tools designed for venture-backed companies.
What you'll do
- Complete and risk-rate third-party assessments; track issues through resolution
- Review and challenge first-line due diligence and ongoing monitoring
- Maintain risk reporting, metrics, and accurate underlying data
- Support implementation of TPRM tooling and automation
- Contribute to improvements in policies, assessments, due diligence, and lifecycle risk management
- Support audits and regulatory exams
What we're looking for
- 4+ years of third-party risk management experience, including 2+ years in regulated financial services
- Working knowledge of interagency, FFIEC, OCC, and FDIC third-party risk guidance
- Hands-on assessment experience across multiple risk domains
- Experience challenging first-line risk work using evidence
- Experience maintaining TPRM reporting and metrics
- Strong program management, process improvement, and cross-functional influence skills
- Clear communicator able to explain and defend risk positions
Nice to have
- Experience at a bank or fintech moving toward banking
- Experience uplifting a TPRM program
- Experience with TPRM tooling, automation, or AI-enabled workflows
- Familiarity with enterprise risk concepts
- CISA or CGRC certification