Third Party Cybersecurity Risk Jobs in Utah (NOW HIRING)

Join our team and build your career with momentum as we champion your growth, elevate your ideas and engage you in purpose-driven work that makes a real difference every day.

Who we are

Founded in 1997, Merrick Bank is an FDIC-insured financial institution headquartered in South Jordan, Utah, with over $10 billion in assets. A wholly owned subsidiary of CardWorks Financial Group, Merrick Bank serves roughly five million cardmembers and more than 100,000 merchant customers nationwide.

What we do

We provide credit cards, recreational loans, deposit accounts, merchant services and bank sponsorships to consumers and businesses. As a leader in non-prime lending and merchant acquiring, we combine innovative technology with data-driven insights to help underserved consumers build and strengthen credit while delivering integrated, scalable payment solutions for businesses.

Merrick Bank ranks among the top 20 FDIC-insured credit card issuers in the U.S. and among the top 15 merchant acquirers by transaction volume.

Essential Functions:

• Supports the execution of the ERM program across the Bank, ensuring consistency in risk identification, assessment, monitoring, and reporting practices.

• Contributes to the development and enhancement of risk reporting and governance processes for Bank Origination and other key risk programs.

• Supports second-line oversight of risks arising from Bank Origination programs through aggregation and analysis of risk related data.

• Assists in monitoring risk exposures, including identification of emerging risks, trends, and concentration risks.

• Partners with first and second-line stakeholders and subject matter experts to collect, validate, and challenge risk inputs.

• Aggregates and analyzes risk information from multiple sources, including risk assessments and risk monitoring activities, to support Bank-level reporting.

• Supports risk appetite monitoring processes, including identification and escalation of threshold breaches or adverse trends.

• Prepares and maintains risk dashboards, key risk indicators (KRIs), and trend analyses for management review.

• Supports the development and maintenance of enterprise risk profiles and supporting documentation.

• Produces concise, decision-useful reporting for senior management and risk governance committees.

• Ensures alignment with internal governance standards, policies, and regulatory expectations.

• Performs other duties as assigned.

Compliance with Laws & Regulations:

• Responsible for complying with all of the Bank's internal control policies and procedures.

• Responsible for understanding and complying with all laws and regulations to which the Bank is subject.

• Responsible for communicating problems in operations, noncompliance with the code of conduct, noncompliance with laws and regulations, policy violations, or illegal acts.

Education and Experience:

• Bachelor's degree in Risk Management, Finance, Business Administration, Accounting, or a related field required; advanced degree or professional certification (e.g., CRMA, FRM, CPA, CIA) preferred.

• Minimum of 3-5 years of progressive experience in Enterprise Risk Management, Operational Risk, Third-Party Risk Management or a related risk discipline within a financial services or regulated environment..

Summary of Qualifications:

• Experience supporting Bank Origination, fintech partnership, or third-party risk oversight activities.

• Familiarity with interagency third-party risk management guidance and partner governance expectations.

• Solid understanding of ERM frameworks, risk governance practices, and regulatory expectations applicable to banking and financial services organizations.

• Proven ability to work cross functionally, influence stakeholders, and partner effectively with both first and second line teams.

• Excellent written and verbal communication skills, with a strong attention to detail and the ability to translate technical risk concepts into business focused insights.

• Experience with ERM systems and risk data repositories (e.g., risk assessment tools, issue management systems, reporting platforms) is strongly preferred.

Work Environment/Physical Demands: Light

The physical requirements described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.

This is largely a sedentary role; however, some filing is required. This would require the ability to lift files, open filing cabinets, and bend or stand on a stool as necessary.

Security Responsibilities - General:

This classification requires heightened security awareness to safeguard the Bank's data, including customer non-public personal information. This security level means that the job includes exposure to all categories of Bank data, including customer non-public personal information.

General Disclosure:

The above statements reflect the general information considered necessary to describe the principal functions of the job and should not be considered as a detailed description of all work requirements that may be inherent to the position. In addition, the incumbent may be called upon to personally handle projects or assignments not usually related to the position's day-to-day activities. Understand and comply with laws and regulations that are applicable to my job function. Understand and comply with company policies and procedures that are applicable to my job function.

#INDHP1

Why join us

We believe in putting people first by supporting our customers, employees and our partners while creating opportunities for everyone to reach their potential. From fostering work-life balance to rewarding good work and innovative ideas, we invest in what matters most, our people.

At Merrick Bank, you'll be part of a collaborative, customer-focused team where you can grow your career while making a meaningful impact.

Our Employee Value Proposition

• Competitive Pay, including a Bonus Target or Variable Pay Incentive Program
• Benefits Package -Medical, Dental, and Vision (plus much more)
• 401(k) Plan with Company Match
• Short- & Long-Term Disability
• Wellness Programs
• Group Life and AD&D Insurance
• Paid Vacation, Sick Days and bank Holidays
• Employee Engagement Activities including Employee Appreciation Day, DEI Employee Resource Groups, Corporate Social Responsibility, Service Recognition

We offer a total rewards package comprised of a competitive base rate of pay, variable pay incentive programs based on the role, and a comprehensive benefit suite. Offered rates of pay are determined based on job-related knowledge, relevant experience, skills, certifications, and geographic location.

We are proud to be an equal opportunity employer. All qualified applicants will receive consideration without regard to age, race, color, sex, or gender identity/expression (including pregnancy, childbirth, transgender status, or sexual orientation), religion or creed, ancestry, citizenship, national origin, disability, military or veteran status, marital status, genetic information, or any other characteristic protected by applicable law.

We do not tolerate discrimination, harassment, or retaliation. Employment decisions are based solely on qualifications, merit, and business needs. Everyone is welcome here, and we hire based on your ability to do the job, not any protected characteristics.

If you need help or reasonable accommodation during the application or hiring process, please let your TA Partner know.