Vice President, Enterprise Risk Management

Join our team - and take the next step in achieving a fulfilling career!

Become an everyday champion - and build a career where your impact fuels financial progress.

What We Do

CardWorks Financial Group is a diversified financial services platform building ethical solutions across credit, lending, and the full customer lifecycle. Through our family of companies, CardWorks Financial Group tackles the complex challenges that larger financial institutions leave behind. We're embedded throughout the credit card ecosystem as a lender, servicer, and merchant acquirer.

Who We Are

• Merrick Bank: The bank that builds
• CardWorks Servicing: One partner, total performance
• Carson Smithfield: Resolution with respect

With nearly 40 years of operating history, our track record is solid: disciplined in downturns and built to accelerate in recovery. The CardWorks Financial Group companies take precise approach in complex markets, as a top three non-prime focused general purpose card issuer and a top fifteen U.S. merchant acquirer.


Our team tackles the industry's most complex credit and payment challenges. And we believe that excellent work starts with a team that feels supported, respected, and empowered to grow.

CardWorks Servicing, LLC provides end-to end operational servicing functions for credit cards, secured cards, and installment loans. We service consumer and small business loans across the credit spectrum and offers backup servicing and due diligence services to capital providers and trustees.

Founded in 1997, Merrick Bank is an FDIC®-insured financial institution headquartered in South Jordan, Utah, with over $10 billion in assets. A wholly owned subsidiary of CardWorks Financial Group, Merrick Bank serves roughly five million cardmembers and more than 100,000 merchant customers, offering credit cards, recreational loans, deposit accounts, merchant services and bank sponsorships to consumers and businesses.

Carson Smithfield, LLC provides a variety of post-charge-off debt recovery services, including digital self-service, IVR, live agent, and external agency management.

Position Summary:

The Vice President, Enterprise Risk Management is responsible for providing strategic leadership, oversight, and continuous enhancement of Merrick Bank's ("Bank") Enterprise Risk Management ("ERM") Program, including the comprehensive oversight of the Third-Party Risk Management ("TPRM") Program. This role leads a team responsible for ensuring enterprise-wide risks-including those arising from third-party relationships-are effectively identified, assessed, monitored, and reported in alignment with regulatory requirements, industry best practices, and the Bank's risk appetite. This role requires strategic cross-functional collaboration and executive-level influence to ensure effective risk governance across the enterprise.

Essential Functions:

• Leads the design, execution, and ongoing enhancement of the Enterprise Risk Management (ERM) framework, ensuring enterprise-wide consistency in risk identification, assessment, monitoring, and reporting.
• Provides strategic oversight of the Third-Party Risk Management (TPRM) program, including governance across the full third-party lifecycle, in alignment with regulatory guidance and the Bank's risk appetite.
• Works across the first and second lines of defense to deliver clear, actionable enterprise and third-party risk insights to senior management, risk committees, and the Board.
• Oversees enterprise risk assessments, risk appetite monitoring, key risk indicators (KRIs), and risk profile reporting, ensuring alignment with internal governance standards and regulatory expectations.
• Aggregates and synthesizes risk information from multiple sources to identify emerging risks, trends, control gaps, and remediation status.
• Serves as a trusted enterprise and third-party risk advisor to executive leadership and governance forums, providing independent challenge and risk perspective.
• Collaborates closely with Compliance, Credit Risk, Information Security, Legal, Vendor Management, and business leadership to strengthen risk governance, data quality, and risk mitigation outcomes.
• Leads, develops, and mentors high-performing ERM and TPRM teams, promoting strong risk culture, accountability, and continuous improvement.
• Maintains and continuously improves the GRC system of record-including governance, data quality, workflows, and reporting-to ensure reliable risk, issue, and third-party records and reduce manual workarounds.
• Delivers executive, committee, and Board-level risk reporting, including dashboards and risk insights that support informed decision-making and effective oversight.
• Maintains and enhances risk management policies, standards, reporting tools, and GRC platforms to improve efficiency, transparency, and regulatory alignment.
• Performs other duties as assigned

Compliance with Laws & Regulations:

• Responsible for complying with all of the Bank's internal control policies and procedures.
• Responsible for understanding and complying with all laws and regulations to which the Bank is subject.
• Responsible for communicating problems in operations, noncompliance with the code of conduct, noncompliance with laws and regulations, policy violations, or illegal acts.

Education and Experience:

• Bachelor's degree in Risk Management, Finance, Business Administration, Accounting, or a related field required; advanced degree or professional certification (e.g., CRMA, FRM, CPA, CIA) preferred.
• Minimum of 15 years of progressive experience in Enterprise Risk Management, Operational Risk, or a related risk discipline within a financial services or regulated environment, with demonstrated leadership responsibility.

Summary of Qualifications:

• Strong expertise in enterprise risk reporting, including development of executive and Board-level materials, risk dashboards, metrics, and written risk summaries.
• In-depth knowledge of third-party risk regulatory requirements and industry standards, including full TPRM lifecycle
• Demonstrated experience aggregating and synthesizing complex risk information into clear, concise, and decision-useful reporting for senior management and Boards.
• Solid understanding of ERM frameworks, risk governance practices, and regulatory expectations applicable to banking and financial services organizations.
• Proven ability to work cross-functionally, influence stakeholders, and partner effectively with both first and second-line teams.
• Excellent written and verbal communication skills, with a strong attention to detail and the ability to translate technical risk concepts into business-focused insights.
• Experience with ERM systems and risk data repositories (e.g., risk assessment tools, issue management systems, reporting platforms) strongly preferred.

Our Employee Value Proposition

• Competitive Pay, including a Bonus Target or Variable Pay Incentive Program
• Benefits Package -Medical, Dental, and Vision (plus much more)
• 401(k) Plan with Company Match
• Short- & Long-Term Disability
• Wellness Programs
• Group Life and AD&D Insurance
• Paid Vacation, Sick Days and bank Holidays
• Employee Engagement Activities including Employee Appreciation Day, DEI Employee Resource Groups, Corporate Social Responsibility, Service Recognition

We offer a total rewards package comprised of a competitive base rate of pay, variable pay incentive programs based on the role, and a comprehensive benefit suite. Offered rates of pay are determined based on job-related knowledge, relevant experience, skills, certifications, and geographic location.

We are proud to be an equal opportunity employer. All qualified applicants will receive consideration without regard to age, race, color, sex, or gender identity/expression (including pregnancy, childbirth, transgender status, or sexual orientation), religion or creed, ancestry, citizenship, national origin, disability, military or veteran status, marital status, genetic information, or any other characteristic protected by applicable law.

We do not tolerate discrimination, harassment, or retaliation. Employment decisions are based solely on qualifications, merit, and business needs. Everyone is welcome here, and we hire based on your ability to do the job, not any protected characteristics.

If you need help or reasonable accommodation during the application or hiring process, please let your TA Partner know.