Sr. Privacy Analyst, Support & Governance

Merrick Bank; South Jordan (UT); On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

Health, Dental & Vision insurance

401(k) Plan with company match

Paid vacation and holidays

Job summary

Merrick Bank, a leading FDIC-insured financial institution based in South Jordan, Utah, seeks a seasoned professional to own and evolve privacy and compliance governance across the organization. You will manage data inventories, risk assessments, and regulatory change processes while coordinating with Legal, IT, and Compliance teams.

The role requires strong analytical capabilities, experience with privacy frameworks, and a proactive approach to identifying control gaps and remediation

Qualifications

• Bachelor’s degree in Business, Compliance, Risk Management, Legal Studies, Information Security, or related field preferred
• Seven (7+) years of compliance, banking, audit, or risk experience required
• Experience with data governance, information security, or privacy-related processes within a regulated financial services environment preferred

Responsibilities

• Own and maintain assigned components of the privacy and compliance governance frameworks, including data inventories, privacy impact assessments, issue management, complaint governance, regulatory change management, and testing standards
• Establish, revise, and maintain standards, procedures, templates, methodologies, inventories, and related documentation for assigned governance areas
• Provide oversight and challenge of enterprise privacy risk assessments, monitoring activities, and other governance reviews to evaluate program effectiveness, identify control weaknesses, and support risk-based oversight
• Identify potential control gaps, assess adherence to governance expectations, and track remediation activities through resolution
• Review assigned issues, findings, and compliance matters to confirm appropriate ownership, classification, documentation quality, and readiness for escalation or closure
• Drive remediation, program enhancements, and continuous improvement initiatives
• Monitor milestone progression, support adherence to governance timelines, and elevate recurring quality concerns
• Partner with Compliance, Information Security, Legal, IT, business units, and other stakeholders to support consistent application of privacy and governance standards
• Support privacy reviews, governance reporting, key risk indicator tracking, audits, and regulatory examinations
• Perform other duties as assigned

Skills

Privacy governance

Regulatory knowledge

Data protection

Analytical skills

Stakeholder communication

MS Office

Education

Bachelor’s degree in Business/Compliance/Legal/InfoSec

Tools

Microsoft Office

Job description

Join our team and build your career with momentum as we champion your growth, elevate your ideas and engage you in purpose-driven work that makes a real difference every day.

Who we are

Founded in 1997, Merrick Bank is an FDIC®-insured financial institution headquartered in South Jordan, Utah, with over $10 billion in assets. A wholly owned subsidiary of CardWorks Financial Group, Merrick Bank serves roughly five million cardmembers and more than 100,000 merchant customers nationwide.

What we do

We provide credit cards, recreational loans, deposit accounts, merchant services and bank sponsorships to consumers and businesses. As a leader in non-prime lending and merchant acquiring, we combine innovative technology with data-driven insights to help underserved consumers build and strengthen credit while delivering integrated, scalable payment solutions for businesses. Merrick Bank ranks among the top 20 FDIC®-insured credit card issuers in the U.S. and among the top 15 merchant acquirers by transaction volume.

Essential Functions

Own and maintain assigned components of the privacy and compliance governance frameworks, including data inventories, privacy impact assessments, issue management, complaint governance, regulatory change management, and testing standards, as applicable. Establish, revise, and maintain standards, procedures, templates, methodologies, inventories, and related documentation for assigned governance areas. Provide oversight and challenge of enterprise privacy risk assessments, monitoring activities, and other governance reviews to evaluate program effectiveness, identify control weaknesses, and support risk-based oversight, Identify potential control gaps, assess adherence to governance expectations, and track remediation activities through resolution. Review assigned issues, findings, and compliance matters to confirm appropriate ownership, classification, documentation quality, and readiness for escalation or closure. Drive remediation, program enhancements, and continuous improvement initiatives. Monitor milestone progression, support adherence to governance timelines, and elevate recurring quality concerns, missed milestones, governance breaches, or systemic issues, as appropriate. Partner with Compliance, Information Security, Legal, IT, business units, and other stakeholders to support consistent application of privacy and compliance governance standards. Support privacy reviews, governance reporting, key risk indicator tracking, audits, and regulatory examinations. Perform other duties as assigned.

Requirements for Success

Education & Experience: Bachelor’s degree in Business, Compliance, Risk Management, Legal Studies, Information Security, or related field preferred; equivalent relevant experience may be considered. Seven (7+) years of compliance, banking, audit, or risk experience required Experience with data governance, information security, or privacy-related processes within a regulated financial services environment preferred. Experience performing risk assessments or governance oversight required Experience supporting or building compliance programs aligned with regulatory expectations (e.g., GLBA, data privacy, or information security frameworks) preferred.

Knowledge, Skills and Capabilities

Advanced knowledge of banking, privacy, and data protection laws and regulations. Relevant privacy, compliance, or risk certifications preferred, such as CIPP, CIPM, CIPT, CISA, or CRCM. Strong analytical and problem-solving skills, with the ability to assess complex issues, identify root causes, and formulate sound recommendations. Ability to plan, organize, and prioritize multiple simultaneous assignments while managing to time-sensitive deadlines. Effective written and verbal communication skills, with the ability to present ideas in a clear, concise, and organized manner. Ability to work independently and exercise sound judgment within assigned governance responsibilities. Ability to lead discussions with stakeholders and work collaboratively across departments. Ability to adapt to changes in the regulatory environment and help shape evolving governance expectations and program responses. Professional judgment, integrity, and accountability in handling confidential or sensitive matters. Ability to assess governance effectiveness, identify systemic risks and drive program enhancements. Proficiency in Microsoft Office applications, including Excel, Word, and PowerPoint.

Compliance with Laws & Regulations

Responsible for complying with all the Bank’s internal control policies and procedures. Responsible for understanding and complying with all laws and regulations to which the Bank is subject. Responsible for communicating problems in operations, noncompliance with the code of conduct, noncompliance with laws and regulations, policy violations, or illegal acts.

Work Environment/Physical Demands

Work is in an office environment, sustained posture in a seated position for prolonged periods of time; works with computer equipment for prolonged periods of time. Some stress may occur Travel is generally not required.

Why join us

We believe in putting people first by supporting our customers, employees and our partners while creating opportunities for everyone to reach their potential. From fostering work-life balance to rewarding good work and innovative ideas, we invest in what matters most, our people. At Merrick Bank, you’ll be part of a collaborative, customer-focused team where you can grow your career while making a meaningful impact.

Our Employee Value Proposition

Competitive Pay, including a Bonus Target or Variable Pay Incentive Program Benefits Package -Medical, Dental and Vision (plus much more) 401(k) Plan with Company Match Short- & Long-Term Disability Wellness Programs Group Life and AD&D Insurance Paid Vacation, Sick Days and bank Holidays Employee Engagement Activities including Employee Appreciation Day, DEI Employee Resource Groups, Corporate Social Responsibility, Service Recognition We offer a total rewards package comprised of a competitive base rate of pay, variable pay incentive programs based on the role, and a comprehensive benefit suite.Offered rates of pay are determined based on job-related knowledge, relevant experience, skills, certifications, and geographic location.

We are proud to be an equal opportunity employer. All qualified applicants will receive consideration without regard to age, race, color, sex, or gender identity/expression (including pregnancy, childbirth, transgender status, or sexual orientation), religion or creed, ancestry, citizenship, national origin, disability, military or veteran status, marital status, genetic information, or any other characteristic protected by applicable law. We do not tolerate discrimination, harassment, or retaliation. Employment decisions are based solely on qualifications, merit, and business needs. Everyone is welcome here, and we hire based on your ability to do the job, not any protected characteristics. If you need help or reasonable accommodation during the application or hiring process, please let your TA Partner know.

Our growth is creating great opportunities! Our team is expanding, and we want to hire the most talented people we can. Continued success depends on it!

CardWorks Financial Group is the engine driving financial progress, a diversified consumer finance provider building ethical solutions across credit, lending, and the full customer lifecycle. Advancing finance with purpose, we put people—clients, customers, and colleagues—at the center of everything we do, guided by our CRITICAL values and united as one enterprise across Merrick Bank, CardWorks Servicing, and Carson Smithfield. As your everyday champion, our vertically integrated platform fuels financial progress through access to credit, high yield deposits, flexible merchant payments, and end to end servicing performance-powered by a culture of relentless curiosity, belonging, and growth.