Information Security, Governance Risk, and Compliance Analyst

📋 Description

• Lead and scale security risk, governance, and compliance programs.
• Partner with Engineering, Product, IT, Legal, Ops to mitigate risk.
• Drive audit readiness for SOC 2, PCI DSS, NIST, CIS, ISO 27001.
• Conduct gap assessments and close gaps with practical plans.
• Design and mature scalable governance processes and controls.
• Improve business continuity, resilience, and third-party risk.

🎯 Requirements

• Scale security, risk, and governance in high-growth SaaS/fintech.
• Translate SOC 2, PCI DSS, NIST, CIS, ISO 27001 into controls.
• Strong ownership and cross-functional project management.
• Create structure from ambiguity; build programs from scratch.
• Use a risk-based approach; distinguish theoretical vs material risk.
• Communicate clearly with technical and non-technical stakeholders.

🎁 Benefits

• Shape Mercury's security program as it scales.
• Collaborate across Engineering, Product, IT, Legal, and Ops.
• Competitive salary and equity package.
• Comprehensive benefits and work-life balance options.
• Equal Opportunity employer; accommodations available.
• Fintech SaaS with fast growth and impact.