Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Third Party Risk Manager role.
Rezi rewrites your resume against Mercury's job description. Free.
Tailor your resume to this Third Party Risk Manager role.
Rezi rewrites your resume against Mercury's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Third Party Risk Manager posting at Mercury — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Third Party Risk Manager posting at Mercury — free, in seconds.
About the Role
As Mercury prepares to become a bank, our Third Party Risk Management (TPRM) program is in active development to meet bank-level regulatory expectations. As an early member of a growing TPRM team, you’ll help run the program day-to-day and contribute how it matures, bringing your own judgment and point of view to a function that is usually more rigidly defined, with room to be creative and make your mark. As a Third Party Risk Manager, you’ll help protect Mercury, our customers, and the broader financial ecosystem from the risks that come with relying on third parties. Reporting to the Senior Manager, Third Party Risk Management, you’ll complete third-party risk assessments, support risk reporting, and provide second-line oversight. This position focuses on enterprise-wide TPRM, rather than in-depth expertise in a specific domain like security or privacy. You will work closely with subject-matter experts across Compliance, Information Security, Privacy, and Procurement to make sure their requirements are reflected in the program, bringing a view across the full third-party lifecycle and the regulatory expectations that come with banking.
Responsibilities
- Assess and risk rate third parties, and open and track issues through resolution.
- Review and challenge first-line due diligence and ongoing monitoring, including reporting, approvals and oversight of those activities.
- Support maintenance of third party risk reporting and metrics for management and governance forums, and help keep the underlying data accurate.
- Help implement tooling and automation to make processes more efficient.
- Support and contribute to uplift efforts across the TPRM program, including updates to policies, due diligence, risk assessment processes, and risk management across the third party lifecycle.
Requirements
- 4+ years of third party risk management experience, including 2+ years in a regulated financial services environment (bank, or fintech working with bank partners).
- Working knowledge of regulatory guidance on third party risk, including the Interagency Guidance on Third Party Relationships (and related FFIEC, OCC and FDIC expectations), and TPRM industry practices across the third party lifecycle (planning, due diligence, contracting, monitoring, termination).
- Hands-on experience completing third party risk assessments across multiple risk domains, not only security.
- Experience reviewing and challenging first-line risk work with evidence-based pushback.
- Experience supporting audits or exams of a TPRM program (gathering evidence, responding to requests, following up on findings).
- Experience building or maintaining TPRM reporting and metrics, with attention to data accuracy.
- Solid program and project management skills, with experience supporting a program that spans multiple cross-functional components and driving process improvements through to implementation.
- Proven ability to influence cross-functional partners (Procurement, Finance, InfoSec, Legal, Privacy) without direct authority.
- Clear communicator who can explain a risk position and hold it under pushback.
Skills
- Third Party Risk Management
- Risk Assessment
- Risk Reporting
- Second-line Oversight
- Program Management
- Project Management
- Data Accuracy
- Process Improvement
- Cross-functional Influence
- Communication
Location
- US employees in New York City, Los Angeles, Seattle, or the San Francisco Bay Area
- US employees outside of New York City, Los Angeles, Seattle, or the San Francisco Bay Area
- Canadian employees (any location)
Work Type
- Full-time
Experience Level
- 4+ years of third party risk management experience
- 2+ years in a regulated financial services environment
Education Level
- Relevant certification (e.g., CISA, CGRC)
Salary/Compensations
- US employees in New York City, Los Angeles, Seattle, or the San Francisco Bay Area: $132,400—$165,500 USD
- US employees outside of New York City, Los Angeles, Seattle, or the San Francisco Bay Area: $119,200—$149,000 USD
- Canadian employees (any location): $125,100—$156,400 CAD
Benefits
- Base salary
- Equity (stock options/RSUs)
About the Company
- Mercury is a fintech company, not an FDIC-insured bank. Banking services provided through Choice Financial Group and Column N.A., Members FDIC.
- The total rewards package at Mercury includes base salary, equity (stock options/RSUs), and benefits.
- Our salary and equity ranges are highly competitive within the SaaS and fintech industry and are updated regularly using the most reliable compensation survey data for our industry.
- New hire offers are made based on a candidate’s experience, expertise, geographic location, and internal pay equity relative to peers.
Equal Opportunity
- Mercury values diversity & belonging and is proud to be an Equal Employment Opportunity employer. All individuals seeking employment at Mercury are considered without regard to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, sexual orientation, or any other legally protected characteristic. We are committed to providing reasonable accommodations throughout the recruitment process for applicants with disabilities or special needs. If you need assistance, or an accommodation, please let your recruiter know once you are contacted about a role.