Analyst II, Third-Party Risk Management

Join our team and build your career with momentum as we champion your growth, elevate your ideas and engage you in purpose-driven work that makes a real difference every day.

Who we are Founded in 1997, Merrick Bank is an FDIC-insured financial institution headquartered in South Jordan, Utah, with over $10 billion in assets. A wholly owned subsidiary of Card Works Financial Group, Merrick Bank serves roughly five million card members and more than 100,000 merchant customers nationwide.

What we doWe provide credit cards, recreational loans, deposit accounts, merchant services and bank sponsor ships to consumers and businesses. As a leader in non-prime lending and merchant acquiring, we combine innovative technology with data-driven insights to help underserved consumers build and strengthen credit while delivering integrated, scalable payment solutions for businesses.

Merrick Bank ranks among the top 20 FDIC-insured credit card issuers in the U.S. and among the top 15 merchant acquirers by transaction volume.

Position Summary and Role Impact:

The Enterprise Risk Management (“ERM”) team is responsible for implementing the risk governance program, risk oversight, and to provide an independent view of risks faced by Card Works, its clients and their customers.

The Third-Party Risk Analyst II supports the overall direction of Third-Party Risk Management (“TPRM”) activities by identifying and assessing potential risks with current and potential third parties.

Essential Functions:

Identify and assess potential risks in current and potential third parties and provide written summaries of findings (background checks, legal cases, business reports, complaints, news, internet searches, etc.).Assist in the oversight/ coordination of third-party risk management and the respective oversight and performance assessments.

Work with the vendor relationship owners throughout the organization for current and potential third parties to obtain necessary information for risk assessments (financials, audit reports, questionnaires, policies, etc.).Assess, in writing, key risks that may arise from the Company’s outsourced activities and options for controlling these risks.

Assist in preparing TPRM reporting for management and committees, including board of directors.

Identify issues and make recommendations for improving the assessment/coordination process.

Adjust processes to adhere to changes in the regulatory environment.

Create and maintain operational procedures for TPRM processes.

Escalate suspected violations of law, regulations, or non-compliance with Company policies.

Adherence to the Company’s internal controls policies and procedures.

Perform other duties as assigned by VP of Enterprise Risk Management and/or reporting manager.

Requirements for Success:

Education & Experience:

Bachelor’s degree in a business-related field required; or four (4) years of related work experience accepted in lieu of education

Two (2) years of related experience in Third-Party Risk Management Additional experience with risk, audit or internal control monitoring experience preferred undefined

Must possess strong analytical skills, system skills, and writing/ communication skillsGRC (Governance, Risk and Compliance) system experience preferable (Archer experience a plus)

Experience with Microsoft applications (Excel, Word, PowerPoint, and Visio)
Industry experience and general knowledge of third-party risk management

Demonstrate an ability to establish and maintain effective working relationships at all levels within the organization

Effective planning, time management, attention to detail, customer service, and problem-solving skills.

Ability to work effectively under pressure. Skilled at handling a variety of assignments simultaneously.…