Senior Risk Investigator - Fraud Incident Management & Partner Response

Mercury · San Francisco, or Remote within United States · $154,200-$192,800 USD for US employees in New York City, Los Angeles, Seattle, or the San Francisco Bay Area; $138,800-$173,500 USD for US employees outside of these areas · remote About the Team Mercury is building a complete financial stack for startups, and Risk is how we protect our customers, Mercury, and the broader financial ecosystem. You'll join Fraud Operations, part of the Fraud & Disputes organization. The team investigates and prevents fraud across every Mercury product, and works hand in hand with Risk Strategy, Product, Engineering, Compliance, and our bank partners. Our investigators, Fraud Enablement team, and BPO partners handle the volume. This role makes sure that when something goes wrong, or when a regulator or bank partner asks hard questions, we respond quickly, consistently, and with evidence. Role Summary This is a senior individual contributor role for an investigator who thrives in the hardest, least defined problems in fraud. You will own fraud incident response from detection to postmortem across first-party and third-party fraud, write the memos and responses that our partners and auditors rely on, and be the operational voice of Fraud Operations in partner-bank conversations. You will lead Fraud Operations' response to audit and regulatory observations, and you will help Mercury get ready to operate as a bank, translating what examiners and partner banks expect into the processes, evidence, and documentation our teams need every day. You don't need to be the deepest domain expert in every fraud typology. You need to be able to hold your own in an incident, ask the right questions, bring the right people in, and turn a messy channel full of data into a clear, defensible, and actionable narrative. You'll work closely with Fraud Investigations and Enablement, Risk Strategy, Compliance, Legal, Partnerships, Product, and Engineering. What You'll Do Lead fraud incident management Act as incident lead or operational DRI for fraud incidents across all Mercury products, including account takeover, card testing and BIN attacks, mule and ring activity, spikes in fraud behavior, and first-party fraud trends. Mobilize incident response, size impact, pull the right people from Fraud Investigations, Enablement, Strategy, Product, and Engineering, and keep everyone aligned on what we know, what we don't, and who owns what. Make or tee up decisions with a recommendation attached: containment, customer communication, reimbursement and credit decisions, account actions, and when to escalate. Run postmortems and retros for first-party and third-party fraud incidents: root cause, control gaps, remediation owners and dates, and track statuses of each. Spot patterns across incidents and turn them into durable fixes in alerts, rules, SOPs, product or tooling change requests, and training instead of one-off responses. Write the memos and responses partners and auditors rely on Draft incident and retro memos for bank partners and internal risk governance: what happened, impact, root cause, controls in place, remediation plan, and timelines. Use AI tools to get from raw incident data to a strong first draft quickly, then verify every number and claim against source data before it leaves the team. Prepare accurate, concise responses to partner-bank questions, suspicious activity and investigation inquiries, and requests for information. Coordinate with bank partners Be a day-to-day operational point of contact for partner-bank risk, AML, and investigations teams, working alongside Partnerships and Compliance. Track open partner requests, commitments, and change-management items, and make sure Fraud Operations responds consistently and on time. Bring partner feedback and expectations back to Fraud Operations, Strategy, and Product so controls and processes are built with the partner in mind. Support audit and exam response for the Fraud domain Be Fraud Operations sup