Analyst II, Third-Party Risk Management

Merrick Bank; South Jordan (UT); On-site; USD 65,000 - 90,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401(k) Plan with Company Match

Short- & Long-Term Disability

Wellness Programs

Group Life Insurance

Paid Vacation and Holidays

Employee Engagement Activities

Job summary

Merrick Bank’s Enterprise Risk Management (ERM) team is seeking a Third-Party Risk Analyst II to support TPRM activities. You will identify and assess risks in current and potential third parties, coordinate information gathering, and contribute to risk reporting for management and the board.

Ideal candidates have 2+ years in TPRM, strong analytical and writing skills, and familiarity with GRC tools and Microsoft applications.

Qualifications

• Bachelor’s degree in a business-related field or four years of related work experience in lieu of education.
• Two years of related experience in Third-Party Risk Management.
• Additional experience with risk, audit or internal control monitoring preferred.
• Strong analytical, system, writing and communication skills.
• GRC system experience preferable; Archer experience a plus.
• Experience with Microsoft applications (Excel, Word, PowerPoint, Visio).
• Industry knowledge of third-party risk management.
• Ability to build and maintain relationships at all levels of the organization.
• Strong planning, time management, detail orientation, and problem-solving.
• Ability to work under pressure and manage multiple tasks.

Responsibilities

• Identify and assess potential risks in current and potential third parties and provide written summaries of findings (background checks, legal cases, business reports, complaints, news, internet searches).
• Assist in oversight/coordination of third-party risk management and related assessments.
• Collaborate with vendor relationship owners to obtain information for risk assessments (financials, audit reports, questionnaires, policies).
• Write assessments detailing key risks from outsourced activities and options for controls.
• Assist in preparing TPRM reporting for management and committees, including the board.
• Identify issues and recommend improvements to assessment/coordination processes.
• Adjust processes to regulatory changes.
• Create and maintain operational procedures for TPRM processes.
• Escalate suspected violations of laws, regulations, or internal policies.
• Adhere to internal controls policies and procedures.

Skills

Analytical skills

Writing skills

Communication skills

Time management

Ability to work under pressure

Education

Bachelor’s degree in business or related field

Tools

Microsoft Excel

Microsoft Word

PowerPoint

Visio

Archer (GRC)

Job description

Who we are

Founded in 1997, Merrick Bank is an FDIC®-insured financial institution headquartered in South Jordan, Utah, with over $10 billion in assets. A wholly owned subsidiary of CardWorks Financial Group, Merrick Bank serves roughly five million cardmembers and more than 100,000 merchant customers nationwide.

What we do

We provide credit cards, recreational loans, deposit accounts, merchant services and bank sponsorships to consumers and businesses. As a leader in non-prime lending and merchant acquiring, we combine innovative technology with data-driven insights to help underserved consumers build and strengthen credit while delivering integrated, scalable payment solutions for businesses. Merrick Bank ranks among the top 20 FDIC®-insured credit card issuers in the U.S. and among the top 15 merchant acquirers by transaction volume.

Position Summary and Role Impact

The Enterprise Risk Management (“ERM”) team is responsible for implementing the risk governance program, risk oversight, and to provide an independent view of risks faced by CardWorks, its clients and their customers. The Third-Party Risk Analyst II supports the overall direction of Third-Party Risk Management (“TPRM”) activities by identifying and assessing potential risks with current and potential third parties.

Essential Functions

• Identify and assess potential risks in current and potential third parties and provide written summaries of findings (background checks, legal cases, business reports, complaints, news, internet searches, etc.).
• Assist in the oversight/ coordination of third-party risk management and the respective oversight and performance assessments.
• Work with the vendor relationship owners throughout the organization for current and potential third parties to obtain necessary information for risk assessments (financials, audit reports, questionnaires, policies, etc.).
• Assess, in writing, key risks that may arise from the Company’s outsourced activities and options for controlling these risks.
• Assist in preparing TPRM reporting for management and committees, including board of directors.
• Identify issues and make recommendations for improving the assessment/coordination process.
• Adjust processes to adhere to changes in the regulatory environment.
• Create and maintain operational procedures for TPRM processes.
• Escalate suspected violations of law, regulations, or non-compliance with Company policies.
• Adherence to the Company’s internal controls policies and procedures.
• Perform other duties as assigned by VP of Enterprise Risk Management and/or reporting manager.

Requirements for Success: Education & Experience

• Bachelor’s degree in a business-related field required; or four (4) years of related work experience accepted in lieu of education.
• Two (2) years of related experience in Third-Party Risk Management.
• Additional experience with risk, audit or internal control monitoring experience preferred undefined.
• Must possess strong analytical skills, system skills, and writing/ communication skills.
• GRC (Governance, Risk and Compliance) system experience preferable (Archer experience a plus).
• Experience with Microsoft applications (Excel, Word, PowerPoint, and Visio).
• Industry experience and general knowledge of third-party risk management.
• Demonstrate an ability to establish and maintain effective working relationships at all levels within the organization.
• Effective planning, time management, attention to detail, customer service, and problem-solving skills.
• Ability to work effectively under pressure.
• Skilled at handling a variety of assignments simultaneously.
• Flexibility and willingness to work at a rapid pace under strict time frames.
• Compliance with Laws & Regulations: Responsible for complying with all the Bank’s internal control policies and procedures; Responsible for understanding and complying with all laws and regulations to which the Bank is subject; Responsible for communicating problems in operations, noncompliance with the code of conduct, noncompliance with laws and regulations, policy violations, or illegal acts.

Why join us

We believe in putting people first by supporting our customers, employees and our partners while creating opportunities for everyone to reach their potential. From fostering work-life balance to rewarding good work and innovative ideas, we invest in what matters most, our people. At Merrick Bank, you’ll be part of a collaborative, customer-focused team where you can grow your career while making a meaningful impact. Our Employee Value Proposition

Competitive Pay, including a Bonus Target or Variable Pay Incentive Program

Our Employee Value Proposition Competitive Pay, including a Bonus Target or Variable Pay Incentive Program

Benefits Package

• Medical, Dental, and Vision (plus much more)
• 401(k) Plan with Company Match
• Short- & Long-Term Disability
• Wellness Programs
• Group Life and AD'D Insurance
• Paid Vacation, Sick Days and bank Holidays
• Employee Engagement Activities including Employee Appreciation Day, DEI
• Employee Resource Groups
• Corporate Social Responsibility
• Service Recognition

We offer a total rewards package comprised of a competitive base rate of pay, variable pay incentive programs based on the role, and a comprehensive benefit suite. Offered rates of pay are determined based on job-related knowledge, relevant experience, skills, certifications, and geographic location.

We are proud to be an equal opportunity employer. All qualified applicants will receive consideration without regard to age, race, color, sex, or gender identity/expression (including pregnancy, childbirth, transgender status, or sexual orientation), religion or creed, ancestry, citizenship, national origin, disability, military or veteran status, marital status, genetic information, or any other characteristic protected by applicable law. We do not tolerate discrimination, harassment, or retaliation. Employment decisions are based solely on qualifications, merit, and business needs. Everyone is welcome here, and we hire based on your ability to do the job, not any protected characteristics. If you need help or reasonable accommodation during the application or hiring process, please let your TA Partner know.

CardWorks Financial Group is the engine driving financial progress, a diversified consumer finance provider building ethical solutions across credit, lending, and the full customer lifecycle. Advancing finance with purpose, we put people—clients, customers, and colleagues—at the center of everything we do, guided by our CRITICAL values and united as one enterprise across Merrick Bank, CardWorks Servicing, and Carson Smithfield. As your everyday champion, our vertically integrated platform fuels financial progress through access to credit, high yield deposits, flexible merchant payments, and end to end servicing performance—powered by a culture of relentless curiosity, belonging, and growth.