Analyst II, Third-Party Risk Management

CardWorks, Inc.; South Jordan (UT); Hybrid; USD 60,000 - 80,000; Full time

Benefits offered by this job

Competitive pay

Medical, Dental, Vision

401(k) Match

Paid Vacation & Holidays

Wellness Programs

Job summary

Merrick Bank, a CardWorks Financial Group company, is seeking an Analyst II for Third-Party Risk Management in South Jordan, UT. You will identify and assess risks in current and potential vendors, help coordinate risk programs, and prepare management reports.

The role requires strong analytical and writing skills, plus experience with GRC systems (Archer is a plus) and the MS Office suite. You’ll support governance and controls while collaborating across departments in a fast-paced environment.

Qualifications

• Bachelor’s degree in a business-related field required; or four (4) years of related work experience accepted in lieu of education
• Two (2) years of related experience in Third-Party Risk Management
• GRC (Governance, Risk and Compliance) system experience preferable (Archer experience a plus)
• Experience with Microsoft applications (Excel, Word, PowerPoint, Visio)

Responsibilities

• Identify and assess potential risks in current and potential third parties and provide written summaries of findings (background checks, legal cases, business reports, complaints, news, internet searches)
• Assist in the oversight/coordination of third-party risk management and the respective oversight and performance assessments
• Work with vendor relationship owners throughout the organization for current and potential third parties to obtain necessary information for risk assessments (financials, audit reports, questionnaires, policies)
• Assess, in writing, key risks that may arise from the Company’s outsourced activities and options for controlling these risks
• Assist in preparing TPRM reporting for management and committees, including board of directors
• Identify issues and make recommendations for improving the assessment/coordination process
• Adjust processes to adhere to changes in the regulatory environment
• Create and maintain operational procedures for TPRM processes
• Escalate suspected violations of law, regulations, or non-compliance with Company policies
• Adherence to the Company’s internal controls policies and procedures
• Perform other duties as assigned by VP of Enterprise Risk Management and/or reporting manager

Skills

Analytical skills

Writing & communication

Interpersonal skills

Time management

Education

Bachelor’s degree in business-related field

Tools

Microsoft Excel

PowerPoint

Visio

Archer (GRC)

Job description

Analyst II, Third-Party Risk ManagementThis website stores cookies on your computer. These cookies are used to collect information about how you interact with our website. We use this information in order to improve and customize your browsing experience and for analytics about our visitors to this website. To find out more, see our Privacy Policy.### Analyst II, Third-Party Risk ManagementApply: South Jordan: Virtual East: Full time: Posted Yesterday: JR101214**Join our team and build your career with momentum as we champion your growth, elevate your ideas and engage you in purpose-driven work that makes a real difference every day.** **Who we are**Founded in 1997, Merrick Bank is an FDIC-insured financial institution headquartered in South Jordan, Utah, with over $10 billion in assets. A wholly owned subsidiary of CardWorks Financial Group, Merrick Bank serves roughly five million cardmembers and more than 100,000 merchant customers nationwide. **What we do**We provide credit cards, recreational loans, deposit accounts, merchant services and bank sponsorships to consumers and businesses. As a leader in non-prime lending and merchant acquiring, we combine innovative technology with data-driven insights to help underserved consumers build and strengthen credit while delivering integrated, scalable payment solutions for businesses.Merrick Bank ranks among the top 20 FDIC-insured credit card issuers in the U.S. and among the top 15 merchant acquirers by transaction volume.**Position Summary and Role Impact:**The Enterprise Risk Management (“ERM”) team is responsible for implementing the risk governance program, risk oversight, and to provide an independent view of risks faced by CardWorks, its clients and their customers. The Third-Party Risk Analyst II supports the overall direction of Third-Party Risk Management (“TPRM”) activities by identifying and assessing potential risks with current and potential third parties.**Essential Functions:*** Identify and assess potential risks in current and potential third parties and provide written summaries of findings (background checks, legal cases, business reports, complaints, news, internet searches, etc.).* Assist in the oversight/ coordination of third-party risk management and the respective oversight and performance assessments.* Work with the vendor relationship owners throughout the organization for current and potential third parties to obtain necessary information for risk assessments (financials, audit reports, questionnaires, policies, etc.).* Assess, in writing, key risks that may arise from the Company’s outsourced activities and options for controlling these risks.* Assist in preparing TPRM reporting for management and committees, including board of directors.* Identify issues and make recommendations for improving the assessment/coordination process.* Adjust processes to adhere to changes in the regulatory environment.* Create and maintain operational procedures for TPRM processes.* Escalate suspected violations of law, regulations, or non-compliance with Company policies.* Adherence to the Company’s internal controls policies and procedures.* Perform other duties as assigned by VP of Enterprise Risk Management and/or reporting manager.**Requirements for Success:****Education & Experience:*** Bachelor’s degree in a business-related field required; or four (4) years of related work experience accepted in lieu of education* Two (2) years of related experience in Third-Party Risk Management* Additional experience with risk, audit or internal control monitoring experience preferred* undefined* Must possess strong analytical skills, system skills, and writing/ communication skills* GRC (Governance, Risk and Compliance) system experience preferable (Archer experience a plus)* Experience with Microsoft applications (Excel, Word, PowerPoint, and Visio)* Industry experience and general knowledge of third-party risk management* Demonstrate an ability to establish and maintain effective working relationships at all levels within the organization* Effective planning, time management, attention to detail, customer service, and problem-solving skills.* Ability to work effectively under pressure. Skilled at handling a variety of assignments simultaneously. Flexibility and willingness to work at a rapid pace under strict time frames. **Compliance with Laws & Regulations*** Responsible for complying with all the Bank’s internal control policies and procedures.* Responsible for understanding and complying with all laws and regulations to which the Bank is subject.* Responsible for communicating problems in operations, noncompliance with the code of conduct, noncompliance with laws and regulations, policy violations, or illegal acts. *#INDMB**#INDHP1* **Why join us**We believe in putting people first by supporting our customers, employees and our partners while creating opportunities for everyone to reach their potential. From fostering work-life balance to rewarding good work and innovative ideas, we invest in what matters most, our people.At Merrick Bank, you’ll be part of a collaborative, customer-focused team where you can grow your career while making a meaningful impact. **Our Employee Value Proposition*** Competitive Pay, including a Bonus Target or Variable Pay Incentive Program* Benefits Package -Medical, Dental, and Vision (plus much more)* 401(k) Plan with Company Match* Short- & Long-Term Disability* Wellness Programs* Group Life and AD&D Insurance* Paid Vacation, Sick Days and bank Holidays* Employee Engagement Activities including Employee Appreciation Day, DEI Employee Resource Groups, Corporate Social Responsibility, Service Recognition *We offer a total rewards package comprised of a competitive base rate of pay, variable pay incentive programs based on the role, and a comprehensive benefit suite. Offered rates of pay are determined based on job-related knowledge, relevant experience, skills, certifications, and geographic location.* *We are proud to be an equal opportunity employer. All qualified applicants will receive consideration without regard to age, race, color, sex, or gender identity/expression (including pregnancy, childbirth, transgender status, or sexual orientation), religion or creed, ancestry, citizenship, national origin, disability, military or veteran status, marital status, genetic information, or any other characteristic protected by applicable law.**We do not tolerate discrimination, harassment, or retaliation. Employment decisions are based solely on qualifications, merit, and business needs. Everyone is welcome here, and we hire based on your ability to do the job, not any protected characteristics.**If you need help or reasonable accommodation during the application or hiring process, please let your TA Partner know.*