M

Mercury

Runs online business banking for startups

Lead Compliance Risk Manager - Product Compliance, AI

Regulatory Compliance & EthicsConfirmed live in the last 24 hours
Full-timeRemote

About the Job

Requirements

  • At least 8 years of experience in compliance advisory, product compliance, or regulatory risk, ideally in fintech or financial services, with a record of recognized domain authority.
  • Demonstrated experience advising on AI, machine learning, or model-driven products in regulated environments, or comparable experience establishing a new compliance domain without an existing playbook.
  • Working knowledge of regulatory and supervisory frameworks relevant to AI in banking, including UDAAP, fair lending and ECOA/Reg B, FCRA and adverse action, Reg E and payments authorization, BSA/AML, GLBA and privacy, marketing and disclosure requirements, recordkeeping, complaint management, model risk management expectations, and third-party and vendor risk management guidance.
  • Familiarity with emerging AI-specific regimes and frameworks, including the NIST AI Risk Management Framework and state AI and automated decisioning laws, and ability to assess their practical application.
  • Technical fluency to engage with engineers on model behavior, evaluation and testing, agent permissioning and tool scoping, logging and observability, and data access controls, and to identify risk-revealing questions.
  • Deep experience partnering with product and engineering teams on regulatory and compliance matters throughout the product lifecycle, including fast-moving launches with external dependencies.
  • Ability to own ambiguous, large-scale compliance problems and create and execute strategies to address them without waiting for precedent.
  • Experience designing compliance frameworks spanning multiple product lines or departments and improving systems and processes as the business grows.
  • Demonstrated success working with senior stakeholders, including executives, partner banks, auditors, or regulators, and presenting data-driven recommendations that drive decisions.
  • Strong project management skills, including defining problems, creating execution plans, managing multiple high-impact initiatives, and driving outcomes.
  • Ability to communicate regulatory and financial partner risk clearly to stakeholders and resolve conflicts involving risk tolerance, resourcing, and timelines.
  • Experience mentoring mid-level compliance professionals and raising team capability.
  • Ability to work independently in a fast-paced, ambiguous environment and exercise sound judgment about when to act or escalate.
  • Curiosity, adaptability, and interest in frontier technology and its regulatory challenges.

Responsibilities

  • Serve as the subject matter expert and primary compliance advisor for AI and agentic products, including Command, the API, and agentic access methods such as MCP and CLI.
  • Partner with cross-functional risk and product teams to bring AI products to market in compliance with financial partner obligations, regulatory requirements, and AI governance standards.
  • Ensure processes and products in the area of responsibility comply with applicable rules and regulations; monitor regulatory, supervisory, and emerging AI-specific legal changes and implement updates to affected products.
  • Scope, define, and communicate product and compliance requirements for new product launches and expansions.
  • Drive cross-functional remediation efforts for products within scope.
  • Support departmental initiatives, maintain relevant policies and procedures, develop documentation solutions, and liaise with auditors.
  • Mentor and provide strategic guidance to compliance colleagues as AI capabilities extend across product domains, and promote a strong culture of compliance.
  • Contribute product-level guidance to AI governance updates as Compliance’s AI product expert, working with the Risk team.
  • Advise product and engineering teams throughout discovery, design, evaluation, launch, and iteration to make AI products compliant by design.
  • Identify, assess, and document AI and agentic-system compliance risks, including inaccurate or fabricated output, unauthorized or over-scoped agent action, inadequate consent and disclosure, unexplainable decisioning, disparate impact, cross-customer or cross-organization data leakage, prompt injection, third-party agent risk, and insufficient audit trails; design practical mitigation strategies with cross-functional teams.
  • Define compliance requirements for the LLM gateway, internal app platform, agent orchestration frameworks, and data access and governance layer in partnership with the teams that own them.
  • Establish and refine departmental AI-specific compliance standards for launch evidence, logging, human review, escalation, and out-of-bounds activity, and evolve those standards as the organization and technology grow.
  • Support launches and expansions by defining and communicating compliance requirements early, including for co-marketing and distribution partnerships with third-party AI platforms.
  • Monitor regulatory, supervisory, and industry developments relevant to AI in financial services, assess their impact, and drive required implementation changes.
  • Own and oversee multiple concurrent high-impact AI compliance workstreams, hold project owners accountable for results, and ensure alignment with department and company objectives.
  • Support remediation through root cause analysis, corrective action planning, and execution tracking.
  • Partner with executive leadership, partner-bank compliance teams, and external advisors on high-level AI decisions, presenting data-driven recommendations.
  • Support policy development, documentation standards, audit preparation, and examiner interactions across the Compliance function.
  • Build and reinforce a strong culture of compliance through collaboration, education, and influence; improve AI fluency across the Compliance team and develop reusable tools, templates, and frameworks.

About the Company

Mercury

Runs online business banking for startups

Mercury runs online banking for startups and small businesses, pairing business accounts and corporate cards with built-in software for bill pay, expense tracking, and bookkeeping. It rose to prominence in 2023, when thousands of startups fleeing the collapse of Silicon Valley Bank moved their cash to Mercury within days. Customers open accounts online and use one dashboard to wire money, give employees cards, pay invoices, and invest spare cash in money market and bond funds. Mercury makes money from interest on customer deposits and from card fees, along with paid treasury and software plans. It was founded in 2017 and is based in San Francisco.

Company size
1,001-5,000
Company stage
Series D
Total funding
$750.9M
Headquarters
San Francisco, CA
Founded
2017

Recently Posted Jobs

Explore more opportunities at Mercury

See more jobs