Compliance Risk Manager

Mercury continues its rapid growth trajectory, navigating an increasingly complex regulatory, partner, and product landscape is critical. Compliance is not only a requirement, but a competitive advantage that enables Mercury to move faster, build trust, and launch innovative products responsibly.

• Serve as the subject matter expert and primary compliance advisor for Mercury's AI and agentic products, including Command, our API, and agentic access methods such as MCP and CLI.
• Work closely with cross-functional risk and product teams to bring Mercury's AI products to market in a way that meets all relevant financial partner, regulatory compliance obligations, and our AI governance standards.
• Ensure all processes and products under your area of responsibility comply with applicable rules and regulations. Stay up to date with changes to applicable regulations, supervisory guidance, and emerging AI-specific law, and implement necessary updates to impacted products to maintain compliance.
• Support expansion for new product launches by scoping, defining, and communicating product and compliance requirements.
• Work cross-functionally to drive remediation efforts for products within your defined scope.
• Support the compliance function in defining and achieving departmental initiatives, maintaining relevant policies and procedures, developing documentation solutions, and liaising with auditors.
• Mentor and provide strategic guidance to compliance colleagues as AI capabilities spread across every product domain, and contribute to building a strong culture of compliance across Mercury.
• Work closely with our Risk team, which owns AI governance, as Compliance’s AI product expert to contribute product-level guidance to ongoing AI governance updates.

• Partner closely with Product, Engineering, Risk, Data, Operations, and Legal to bring Mercury's AI products to market in a manner that meets all relevant regulatory, financial partner, and network obligations.
• Advise product and engineering teams throughout the product lifecycle—discovery, design, evaluation, launch, and iteration—to ensure AI products are compliant-by-design rather than reviewed after the fact.
• Identify, assess, and document compliance risks specific to AI and agentic systems—including inaccurate or fabricated output, unauthorized or over-scoped agent action, inadequate consent and disclosure, unexplainable decisioning, disparate impact, data leakage across customers or organizations, prompt injection and third-party agent risk, and insufficient audit trail—and work cross-functionally to design pragmatic mitigation strategies.
• Define the compliance requirements for the platforms AI is built on, in partnership with the teams that own them: the LLM gateway all internal traffic routes through, the internal app platform, agent orchestration frameworks, and the data access and governance layer.
• Establish and refine AI-specific compliance standards for the department—what evidence a launch requires, what must be logged, what requires human review, what must be escalated, and what is out of bounds—and ensure those standards evolve as the organization and the technology grow.
• Support new product launches and expansions by scoping, defining, and communicating compliance requirements clearly and early, including for co-marketing and distribution partnerships with third-party AI platforms.
• Monitor regulatory, supervisory, and industry developments relevant to AI in financial services, assess impact, and drive implementation of required changes.

• San Francisco, CA, New York, NY, Portland, OR, or Remote within Canada or United States