About this role
About the Role
Mercury is seeking a Business Continuity Management (BCM) Lead to build and lead an enterprise-wide continuity program as we prepare to become a bank. As part of the Risk team, this leader will establish practical standards, clear accountability, and tested capabilities to maintain critical services and recover effectively from disruptions, with direct visibility to the CRO and senior leadership.
This role fills the need for a dedicated leader to coordinate BCM across the organization. The ideal candidate combines deep continuity and resilience expertise with the judgment to build a proportionate program in a fast-moving environment, working effectively with Engineering, Operations, Product, Information Security, Legal, Compliance, and business teams.
The BCM Lead will own the enterprise framework, coordination, oversight, and reporting. Business and technology owners will remain accountable for their continuity plans and recovery execution.Because this is a new program, the Lead will be hands-on in the initial build: facilitating the first round of BIAs and plans side by side with owners, running exercises, and driving identified gaps through remediation. This leader will also work closely with Engineering on technology disaster recovery and with relevant teams on incident response, crisis management, and third-party resilience.
Key Responsibilities
• Develop and implement Mercury’s enterprise BCM framework, policies, standards, governance, and operating model, with a prioritized implementation roadmap aligned to bank-launch readiness and critical services.
• Partner with business owners to identify critical services, conduct business impact analyses (customer, financial, operational, and regulatory), and map dependencies across people, processes, technology, facilities, and third parties, including single points of failure.
• Establish recovery time objectives (RTOs) and recovery point objectives (RPOs), where applicable, with business and technology owners; challenge gaps between objectives and recovery capabilities.
• Set standards for continuity plans and recovery procedures, and facilitate and support accountable owners in developing actionable plans and alternative operating arrangements.
• Coordinate business continuity with technology disaster recovery, incident response, and crisis management, with clear activation criteria, escalation paths, and communications responsibilities.
• Design and lead a risk-based exercise program, from tabletop simulations to end-to-end recovery tests, and drive lessons learned, remediation tracking, and verification that gaps are closed.
• Partner with Third-Party Risk Management and vendor owners to assess critical provider recovery capabilities, contingency arrangements, and concentration dependencies.
• Embed continuity considerations into new products, material business changes, and technology implementations.
• Establish metrics and reporting that give management and rele