The Assistant Vice President, Third-Party Risk Management ("TPRM") is responsible for leading key components of the execution, oversight, and strategic enhancement of Merrick Bank's ("Bank") Third ...
The Assistant Vice President, Third-Party Risk Management ("TPRM") is responsible for leading key components of the execution, oversight, and strategic enhancement of Merrick Bank's ("Bank") Third ...
The Assistant Vice President, Third-Party Risk Management ("TPRM") is responsible for leading key components of the execution, oversight, and strategic enhancement of Merrick Bank's ("Bank") Third ...
The Assistant Vice President, Third-Party Risk Management ("TPRM") is responsible for leading key components of the execution, oversight, and strategic enhancement of Merrick Bank's ("Bank") Third ...
Direct the continued maturity of a scalable third-party risk management program aligned to the ... credit union's vendor ecosystem, operational complexity, internal governance standards, and ...
Direct the continued maturity of a scalable third-party risk management program aligned to the ... credit union's vendor ecosystem, operational complexity, internal governance standards, and ...
Third Party Risk Management Analyst
Lehi, UT · On-site
Own and manage various actions and task queues that will result from risk management and mitigation activities * Perform quality control & audit checks over TPRM program and third party or business ...
Quick apply
Third Party Risk Management Analyst
Lehi, UT · On-site
Own and manage various actions and task queues that will result from risk management and mitigation activities * Perform quality control & audit checks over TPRM program and third party or business ...
Adaptable, self-directed problem solver who can manage shifting priorities, multiple workstreams ... The Senior Consultant - Technology Third Party Risk Management (TPRM) role offers an opportunity to ...
Adaptable, self-directed problem solver who can manage shifting priorities, multiple workstreams ... The Senior Consultant - Technology Third Party Risk Management (TPRM) role offers an opportunity to ...
Adaptable, self-directed problem solver who can manage shifting priorities and multiple workstreams ... The Senior Consultant - Technology Third Party Risk Management (TPRM) role offers an opportunity to ...
Adaptable, self-directed problem solver who can manage shifting priorities and multiple workstreams ... The Senior Consultant - Technology Third Party Risk Management (TPRM) role offers an opportunity to ...
The Director of Enterprise Risk Management - Governance is a second line risk leader responsible ... Third Party Risk Management (TPRM) Oversight * Oversee the Bank's adherence to Nelnet Inc.'s Third ...
The Director of Enterprise Risk Management - Governance is a second line risk leader responsible ... Third Party Risk Management (TPRM) Oversight * Oversee the Bank's adherence to Nelnet Inc.'s Third ...
The Director of Enterprise Risk Management - Governance is a second line risk leader responsible ... Third Party Risk Management (TPRM) Oversight * Oversee the Bank's adherence to Nelnet Inc.'s Third ...
The Director of Enterprise Risk Management - Governance is a second line risk leader responsible ... Third Party Risk Management (TPRM) Oversight * Oversee the Bank's adherence to Nelnet Inc.'s Third ...
Familiarity with interagency third-party risk management guidance and partner governance expectations. * Solid understanding of ERM frameworks, risk governance practices, and regulatory expectations ...
Familiarity with interagency third-party risk management guidance and partner governance expectations. * Solid understanding of ERM frameworks, risk governance practices, and regulatory expectations ...
Familiarity with interagency third-party risk management guidance and partner governance expectations. * Solid understanding of ERM frameworks, risk governance practices, and regulatory expectations ...
Familiarity with interagency third-party risk management guidance and partner governance expectations. * Solid understanding of ERM frameworks, risk governance practices, and regulatory expectations ...
Third-Party Risk Management (TPRM) * Support the Third-Party Risk Management program, including vendor risk assessments, due diligence, and ongoing monitoring. * Monitor third-party performance and ...
Third-Party Risk Management (TPRM) * Support the Third-Party Risk Management program, including vendor risk assessments, due diligence, and ongoing monitoring. * Monitor third-party performance and ...
Third-Party Risk Management (TPRM) * Support the Third-Party Risk Management program, including vendor risk assessments, due diligence, and ongoing monitoring. * Monitor third-party performance and ...
Third-Party Risk Management (TPRM) * Support the Third-Party Risk Management program, including vendor risk assessments, due diligence, and ongoing monitoring. * Monitor third-party performance and ...
IT Risk Analyst II
Salt Lake City, UT · On-site
$108K - $162K/yr
Core responsibilities include third-party risk management (TPRM) and security risk assessments of vendors, suppliers, internal systems, and projects. The analyst recommends controls to reduce risk to ...
IT Risk Analyst II
Salt Lake City, UT · On-site
$108K - $162K/yr
Core responsibilities include third-party risk management (TPRM) and security risk assessments of vendors, suppliers, internal systems, and projects. The analyst recommends controls to reduce risk to ...
IT Risk Analyst II
Salt Lake City, UT · On-site
$108K - $162K/yr
Core responsibilities include third-party risk management (TPRM) and security risk assessments of vendors, suppliers, internal systems, and projects. The analyst recommends controls to reduce risk to ...
IT Risk Analyst II
Salt Lake City, UT · On-site
$108K - $162K/yr
Core responsibilities include third-party risk management (TPRM) and security risk assessments of vendors, suppliers, internal systems, and projects. The analyst recommends controls to reduce risk to ...
Senior TPRM Security Lead
Salt Lake City, UT · On-site
Gong is seeking an experienced Third Party Risk Manager to join our Governance, Risk, and Compliance (GRC) team. In this role, you will own and mature Gong's third-party risk management program ...
New
Senior TPRM Security Lead
Salt Lake City, UT · On-site
Gong is seeking an experienced Third Party Risk Manager to join our Governance, Risk, and Compliance (GRC) team. In this role, you will own and mature Gong's third-party risk management program ...
New
Manages third-party and large property claims on behalf of the County and other governmental ... Supervises other risk and professional claims staff, which includes assisting in the hiring process ...
New
Manages third-party and large property claims on behalf of the County and other governmental ... Supervises other risk and professional claims staff, which includes assisting in the hiring process ...
New
SAP MDM Data Analyst
Cottonwood Heights, UT · On-site
Join a highly visible enterprise initiative that will have a direct impact on the organization's future Governance, Risk, and Compliance (GRC) and third-party risk management programs. This project ...
New
SAP MDM Data Analyst
Cottonwood Heights, UT · On-site
Join a highly visible enterprise initiative that will have a direct impact on the organization's future Governance, Risk, and Compliance (GRC) and third-party risk management programs. This project ...
New
Compliance Specialist (Sandy, UT)
$30.29 - $37.98/hr
Vendor Risk Management and third-party risk oversight Internal auditing and regulatory compliance processes Financial services regulations and compliance best practices Enterprise risk management ...
Compliance Specialist (Sandy, UT)
$30.29 - $37.98/hr
Vendor Risk Management and third-party risk oversight Internal auditing and regulatory compliance processes Financial services regulations and compliance best practices Enterprise risk management ...
Compliance Specialist (Sandy, UT)
Sandy, UT · On-site
$30.29 - $37.98/hr
Vendor Risk Management and third-party risk oversight * Internal auditing and regulatory compliance processes * Financial services regulations and compliance best practices * Enterprise risk ...
Compliance Specialist (Sandy, UT)
Sandy, UT · On-site
$30.29 - $37.98/hr
Vendor Risk Management and third-party risk oversight * Internal auditing and regulatory compliance processes * Financial services regulations and compliance best practices * Enterprise risk ...
VP Governance & Regulatory Compliance Officer
Midvale, UT · On-site
$150K - $175K/yr
Monitor IRS and regulatory changes impacting Traditional, Roth, SEP, SIMPLE, Self-Directed IRAs ... Third-Party Risk & Vendor Management * Administer the Bank's Third-Party Risk Management Program.
Quick apply
VP Governance & Regulatory Compliance Officer
Midvale, UT · On-site
$150K - $175K/yr
Monitor IRS and regulatory changes impacting Traditional, Roth, SEP, SIMPLE, Self-Directed IRAs ... Third-Party Risk & Vendor Management * Administer the Bank's Third-Party Risk Management Program.
Director Third Party Risk Management information
See Utah salary details
$49.2K - $66.2K
6% of jobs
$66.2K - $83.3K
6% of jobs
$95.5K is the 25th percentile. Wages below this are outliers.
$83.3K - $100.3K
17% of jobs
$100.3K - $117.4K
16% of jobs
The median wage is $120.5K / yr.
$117.4K - $134.4K
23% of jobs
$143.8K is the 75th percentile. Wages above this are outliers.
$134.4K - $151.5K
11% of jobs
$151.5K - $168.5K
6% of jobs
$168.5K - $185.6K
4% of jobs
$185.6K - $202.6K
4% of jobs
$202.6K - $219.6K
2% of jobs
$219.6K - $236.7K
3% of jobs
$49.2K
$130.4K
$236.7K
How much do director third party risk management jobs pay per year?
What are some of the key challenges a director of third party risk management faces when implementing risk assessment frameworks across a large organization?
What does a director of third party risk management do?
What is the difference between Director Third Party Risk Management vs Vendor Risk Manager?
| Aspect | Director Third Party Risk Management | Vendor Risk Manager |
|---|---|---|
| Credentials | Typically requires advanced degrees and certifications like CTPRP or CRISC | Often requires certifications such as CTPRP, CRISC, or vendor-specific training |
| Work Environment | Strategic leadership, overseeing multiple teams and enterprise-wide risk policies | Operational focus, managing vendor assessments and risk mitigation activities |
| Industry Usage | Used in large organizations across finance, healthcare, and technology sectors | Common in organizations with extensive vendor networks, especially in finance and IT |
The main difference is that the Director Third Party Risk Management holds a strategic, leadership role overseeing enterprise-wide third-party risks, while the Vendor Risk Manager focuses on operational vendor assessments and risk mitigation. Both roles require similar certifications but differ in scope and level of responsibility.
What are the key skills and qualifications needed to thrive as a director of third party risk management, and why are they important?

Full-time
Medical, Dental, Vision, Life, Retirement, PTO
Re-posted 7 days ago
Job description
Who we are
Founded in 1997, Merrick Bank is an FDIC®-insured financial institution headquartered in South Jordan, Utah, with over $10 billion in assets. A wholly owned subsidiary of CardWorks Financial Group, Merrick Bank serves roughly five million cardmembers and more than 100,000 merchant customers nationwide.
What we do
We provide credit cards, recreational loans, deposit accounts, merchant services and bank sponsorships to consumers and businesses. As a leader in non-prime lending and merchant acquiring, we combine innovative technology with data-driven insights to help underserved consumers build and strengthen credit while delivering integrated, scalable payment solutions for businesses.
Merrick Bank ranks among the top 20 FDIC®-insured credit card issuers in the U.S. and among the top 15 merchant acquirers by transaction volume.
The Assistant Vice President, Third-Party Risk Management ("TPRM") is responsible for leading key components of the execution, oversight, and strategic enhancement of Merrick Bank's ("Bank") Third-Party Risk Management Program. This role partners across the first and second lines of defense to ensure risks arising from third-party relationships are effectively identified, assessed, monitored, and reported in alignment with regulatory requirements, internal policies, and the Bank's risk appetite.
The AVP serves as a senior program leader responsible for advancing enterprise TPRM strategy, strengthening risk governance, driving consistent risk practices, and delivering actionable insights to senior management and risk governance committees.
Essential Functions:
- Lead the execution and ongoing enhancement of the Bank's Third-Party Risk Management framework, ensuring alignment with regulatory expectations and internal governance standards.
- Oversee risk-based third-party due diligence, risk assessments, and ongoing monitoring activities across the full third-party lifecycle, ensuring consistent, defensible, and risk-informed outcomes.
- Partner with business units, Vendor Relationship Owners, and Subject Matter Experts to identify, assess, and mitigate risks associated with third-party relationships.
- Provide senior level review and challenge of third-party risk assessments, ensuring conclusions are evidence-based, appropriately documented, and escalated when risk exposure exceeds defined thresholds.
- Monitor third-party performance, control effectiveness, and risk indicators, escalating issues, control gaps, and emerging risks in accordance with established governance protocols.
- Lead the design, development, and maintenance of TPRM policies, procedures, standards, and workflows to support a consistent enterprise-wide operating model.
- Define and Deliver executive, committee, and Board-level reporting that provides clear visibility into third-party risk exposure, trends, issues, concentrations, and emerging risks.
- Collaborate with Legal, Procurement, Information Security, Compliance, and business stakeholders to ensure appropriate contract provisions, controls, and risk mitigation strategies are implemented.
- Lead TPRM responses for regulatory exams, internal audits, and independent reviews, including documentation, analysis, issue remediation, and management responses.
- Drive the TPRM program maturity roadmap, including process improvements, automation, data quality, GRC optimization, regulatory alignment, and adoption of industry best practices.
- Leads, develops, and mentors TPRM teams, promoting strong risk culture, accountability, high performance, and continuous improvement.
- Partner with ERM leadership to establish TPRM priorities, roadmap initiatives, governance routines, and success measures aligned to enterprise risk strategy and business objectives.
- Identify and escalate third-party concentration risk, critical vendor risk, fourth-party risk, control gaps, and emerging risk themes to appropriate governance forums.
- Delivers executive, committee, and Board level risk reporting, including dashboards and risk insights that support informed decision making and effective oversight.
- Owns continuous improvement of TPRM tools, data, workflows, reporting, and GRC system capabilities to improve efficiency, transparency, data integrity, and regulatory readiness.
- Performs other duties as assigned.
Requirements for Success:
Education & Experience:
- Bachelor's degree in Risk Management, Finance, Business Administration, Accounting, or a related field required; advanced degree or professional certification, such as CTPRP, CTPRA, CRVPM, CRMA, FRM, CPA, OR CIA preferred.
- Minimum of 8 years of progressive experience in Third-Party Risk Management, Enterprise Risk Management, Operational Risk, or a related risk discipline within a financial services or regulated environment, including experience leading program initiatives, risk governance routines, and team members
Knowledge, Skills and Capabilities:
- Strong expertise in enterprise risk reporting, including development of executive and Board level materials, risk dashboards, metrics, and written risk summaries.
- In-depth knowledge of third-party risk regulatory requirements and industry standards, including full TPRM lifecycle.
- Demonstrated experience aggregating and synthesizing complex risk information into clear, concise, and decision useful reporting for senior management and Boards.
- Solid understanding of ERM frameworks, risk governance practices, and regulatory expectations applicable to banking and financial services organizations.
- Proven ability to work cross functionally, influence stakeholders, and partner effectively with both first and second line teams.
- Excellent written and verbal communication skills, with a strong attention to detail and the ability to translate technical risk concepts into business focused insights.
- Experience with ERM systems and risk data repositories (e.g., risk assessment tools, issue management systems, reporting platforms) strongly preferred.
Compliance with Laws & Regulations
- Responsible for complying with all the Bank's internal control policies and procedures.
- Responsible for understanding and complying with all laws and regulations to which the Bank is subject.
- Responsible for communicating problems in operations, noncompliance with the code of conduct, noncompliance with laws and regulations, policy violations, or illegal acts.
#INDHP1
Why join us
We believe in putting people first by supporting our customers, employees and our partners while creating opportunities for everyone to reach their potential. From fostering work-life balance to rewarding good work and innovative ideas, we invest in what matters most, our people.
At Merrick Bank, you'll be part of a collaborative, customer-focused team where you can grow your career while making a meaningful impact.
Our Employee Value Proposition
- Competitive Pay, including a Bonus Target or Variable Pay Incentive Program
- Benefits Package -Medical, Dental, and Vision (plus much more)
- 401(k) Plan with Company Match
- Short- & Long-Term Disability
- Wellness Programs
- Group Life and AD&D Insurance
- Paid Vacation, Sick Days and bank Holidays
- Employee Engagement Activities including Employee Appreciation Day, DEI Employee Resource Groups, Corporate Social Responsibility, Service Recognition
We offer a total rewards package comprised of a competitive base rate of pay, variable pay incentive programs based on the role, and a comprehensive benefit suite. Offered rates of pay are determined based on job-related knowledge, relevant experience, skills, certifications, and geographic location.
We are proud to be an equal opportunity employer. All qualified applicants will receive consideration without regard to age, race, color, sex, or gender identity/expression (including pregnancy, childbirth, transgender status, or sexual orientation), religion or creed, ancestry, citizenship, national origin, disability, military or veteran status, marital status, genetic information, or any other characteristic protected by applicable law.
We do not tolerate discrimination, harassment, or retaliation. Employment decisions are based solely on qualifications, merit, and business needs. Everyone is welcome here, and we hire based on your ability to do the job, not any protected characteristics.
If you need help or reasonable accommodation during the application or hiring process, please let your TA Partner know.
About Merrick Bank
Sourced by ZipRecruiter
Industry
Commercial banking
Company size
201 - 500 Employees
Headquarters location
South Jordan, UT, US
Year founded
1997