Business Continuity Management Lead

Mercury•San Francisco, NY

11d

About The Position

Mercury is seeking a Business Continuity Management (BCM) Lead to build and lead an enterprise-wide continuity program as the company prepares to become a bank. As part of the Risk team, this leader will establish practical standards, clear accountability, and tested capabilities to maintain critical services and recover effectively from disruptions, with direct visibility to the CRO and senior leadership. The BCM Lead will own the enterprise framework, coordination, oversight, and reporting, while business and technology owners remain accountable for their continuity plans and recovery execution. Because this is a new program, the Lead will be hands-on in the initial build, facilitating the first round of business impact analyses and plans alongside owners, running exercises, and driving identified gaps through remediation. The role will work closely with Engineering on technology disaster recovery and with relevant teams on incident response, crisis management, and third-party resilience. The Lead will also build and lead a growing BCM team, including hiring and developing analysts as the program scales over the next year, and support regulatory examinations and bank-launch readiness reviews. Mercury is a fintech company, not an FDIC-insured bank. Banking services are provided through Choice Financial Group and Column N.A., Members FDIC. Mercury is an Equal Employment Opportunity employer and is committed to providing reasonable accommodations throughout the recruitment process. The total rewards package includes base salary, equity (stock options/RSUs), and benefits. Target new-hire base salary ranges are $163,000–$203,800 USD for US employees in New York City, Los Angeles, Seattle, or the San Francisco Bay Area; $146,700–$183,400 USD for US employees elsewhere; and $154,100–$192,600 CAD for Canadian employees in any location. Offers are based on experience, expertise, geographic location, and internal pay equity.

Requirements

10+ years of experience in business continuity management, operational resilience, disaster recovery, or a related discipline within a fintech, financial institution, technology company, or other highly regulated environment.
Demonstrated experience building or materially enhancing an enterprise BCM program, including governance, implementation, testing, and reporting.
Strong skills in business impact analysis, critical-service identification, dependency mapping, and recovery objective development.
Experience developing actionable continuity plans and leading exercises that test recovery assumptions and expose gaps.
Sufficient technical fluency to work with Engineering on cloud services, system dependencies, data recovery, and technology disaster recovery.
Working knowledge of third-party risk management, including assessing critical vendor recovery capabilities, contingency arrangements, and concentration risk.
Proven ability to drive cross-functional remediation through influence, with a clear view of where BCM oversight ends and business or technology ownership begins.
Excellent written and verbal communication skills, including the ability to explain readiness gaps and tradeoffs to senior leadership.
Experience managing a team of Business Continuity analysts.

Nice To Haves

Familiarity with banking supervisory expectations for business continuity and operational resilience.
Experience operating in a company-building or bank-building environment.
Familiarity with recognized continuity standards, such as ISO 22301, and BCM tools for plan management, exercises, and issue tracking.
Relevant professional certification, such as CBCP or MBCI.

Responsibilities

Develop and implement the enterprise BCM framework, policies, standards, governance, and operating model, with a prioritized roadmap aligned to bank-launch readiness and critical services.
Partner with business owners to identify critical services, conduct business impact analyses, and map dependencies across people, processes, technology, facilities, and third parties, including single points of failure.
Establish recovery time objectives (RTOs) and recovery point objectives (RPOs), where applicable, with business and technology owners, and challenge gaps between objectives and recovery capabilities.
Set standards for continuity plans and recovery procedures, and facilitate and support accountable owners in developing actionable plans and alternative operating arrangements.
Coordinate business continuity with technology disaster recovery, incident response, and crisis management, including activation criteria, escalation paths, and communications responsibilities.
Design and lead a risk-based exercise program, from tabletop simulations to end-to-end recovery tests, and drive lessons learned, remediation tracking, and verification that gaps are closed.
Partner with Third-Party Risk Management and vendor owners to assess critical provider recovery capabilities, contingency arrangements, and concentration dependencies.
Embed continuity considerations into new products, material business changes, and technology implementations.
Establish metrics and reporting that give management and relevant committees visibility into readiness, testing outcomes, material gaps, and overdue remediation.
Build and lead a growing BCM team, including hiring and developing analysts as the program scales over the next year.
Deliver role-based training and promote awareness of continuity responsibilities across the organization.
Support regulatory examinations and bank-launch readiness reviews with accurate documentation and evidence of recovery capability.