Assistant Vice President, Identity & Access Management

AVP Of Identity And Access Management (IAM/PAM/RBAC)

Become an everyday champion — and build a career where your impact fuels financial progress.

Card Works Financial Group is a diversified financial services platform building ethical solutions across credit, lending, and the full customer lifecycle. Through our family of companies, Card Works Financial Group tackles the complex challenges that larger financial institutions leave behind. We're embedded throughout the credit card ecosystem as a lender, servicer, and merchant acquirer.

With nearly 40 years of operating history, our track record is solid: disciplined in downturns and built to accelerate in recovery. The Card Works Financial Group companies take precise approach in complex markets, as a top three non-prime focused general purpose card issuer and a top fifteen U.S. merchant acquirer.

Our team tackles the industry's most complex credit and payment challenges. And we believe that excellent work starts with a team that feels supported, respected, and empowered to grow.

Card Works Servicing, LLC provides end-to-end operational servicing functions for credit cards, secured cards, and installment loans. We service consumer and small business loans across the credit spectrum and offers backup servicing and due diligence services to capital providers and trustees.

Founded in 1997, Merrick Bank is an FDIC®-insured financial institution headquartered in South Jordan, Utah, with over $10 billion in assets. A wholly owned subsidiary of Card Works Financial Group, Merrick Bank serves roughly five million card members and more than 100,000 merchant customers, offering credit cards, recreational loans, deposit accounts, merchant services and bank sponsor ships to consumers and businesses.

Carson Smithfield, LLC provides a variety of post-charge-off debt recovery services, including digital self-service, IVR, live agent, and external agency management.

The AVP of Identity and Access Management (IAM/PAM/RBAC) is responsible for the operational execution and day-to-day management of the organization's Identity and Access Management program. Reporting to the VP of Identity and Access, this role ensures IAM strategy is translated into effective, secure, and scalable operational practices across the enterprise.

The AVP will serve as a hands-on technical and operational leader, partnering closely with application teams, infrastructure teams, and business stakeholders to ensure access controls are implemented consistently and in accordance with least-privilege, regulatory requirements, and organizational risk tolerance. This role requires deep technical expertise, strong execution discipline, and the ability to manage teams and complex initiatives in a regulated financial services environment.

IAM Control Operations & Execution Leadership

• Establish and oversee execution standards for enterprise IAM detective controls, including access certifications, role and entitlement reviews, authentication configuration assessments, access monitoring, and exception management.
• Ensure IAM detective controls are not only operating effectively, but are designed to scale, adapt to risk, and evolve with changes in business processes, systems, and regulatory requirements.
• Direct the prioritization, investigation, escalation, and remediation of access issues identified through detective controls, ensuring timely resolution and clear ownership across engineering, operations, and application teams.
• Maintain executive accountability for control outcomes by tracking issues, themes, and remediation progress through closure, validating risk reduction and sustainable improvements.

IAM Security Monitoring & Incident Leadership

• Align with VP and set expectations and direction for teams responsible for IAM and PAM logging, alerting, monitoring, and certification evidence, ensuring alignment with broader security operations practices.
• Ensure IAM and PAM activity is consistently monitored for anomalous behavior, unauthorized access, excessive privilege usage, and indicators of compromise, with clear escalation paths and response playbooks.
• Provide day to day…