Senior Privacy Analyst – Support & Governance

Location: Lampton

Join our team and build your career with momentum as we champion your growth, elevate your ideas and engage you in purpose-driven work that makes a real difference every day.

Who we are Founded in 1997, Merrick Bank is an FDIC-insured financial institution headquartered in South Jordan, Utah, with over $10 billion in assets. A wholly owned subsidiary of Card Works Financial Group, Merrick Bank serves roughly five million card members and more than 100,000 merchant customers nationwide.

What we doWe provide credit cards, recreational loans, deposit accounts, merchant services and bank sponsor ships to consumers and businesses. As a leader in non-prime lending and merchant acquiring, we combine innovative technology with data-driven insights to help underserved consumers build and strengthen credit while delivering integrated, scalable payment solutions for businesses.

Merrick Bank ranks among the top 20 FDIC-insured credit card issuers in the U.S. and among the top 15 merchant acquirers by transaction volume.

Essential Functions:

Own and maintain assigned components of the privacy and compliance governance frameworks, including data inventories, privacy impact assessments, issue management, complaint governance, regulatory change management, and testing standards, as applicable.

Establish, revise, and maintain standards, procedures, templates, methodologies, inventories, and related documentation for assigned governance areas.

Provide oversight and challenge of enterprise privacy risk assessments, monitoring activities, and other governance reviews to evaluate program effectiveness, identify control weaknesses, and support risk-based oversight, Identify potential control gaps, assess adherence to governance expectations, and track remediation activities through resolution.

Review assigned issues, findings, and compliance matters to confirm appropriate ownership, classification, documentation quality, and readiness for escalation or closure.

Drive remediation, program enhancements, and continuous improvement initiatives.

Monitor milestone progression, support adherence to governance timelines, and escalate recurring quality concerns, missed milestones, governance breaches, or systemic issues, as appropriate.

Partner with Compliance, Information Security, Legal, IT, business units, and other stakeholders to support consistent application of privacy and compliance governance standards.

Support privacy reviews, governance reporting, key risk indicator tracking, audits, and regulatory examinations.

Perform other duties as assigned.

Requirements for Success:

Education & Experience:

Bachelor’s degree in Business, Compliance, Risk Management, Legal Studies, Information Security, or related field preferred; equivalent relevant experience may be considered.

Seven (7+) years of compliance, banking, audit, or risk experience required

Experience with data governance, information security, or privacy-related processes within a regulated financial services environment preferred.

Experience performing risk assessments or governance oversight required

Experience supporting or building compliance programs aligned with regulatory expectations (e.g., GLBA, data privacy, or information security frameworks) preferred

Knowledge, Skills and Capabilities:

Advanced knowledge of banking, privacy, and data protection laws and regulations.

Relevant privacy, compliance, or risk certifications preferred, such as CIPP, CIPM, CIPT, CISA, or CRCM.Strong analytical and problem-solving skills, with the ability to assess complex issues, identify root causes, and formulate sound recommendations.

Ability to plan, organize, and prioritize multiple simultaneous assignments while managing to time-sensitive deadlines.

Effective written and verbal communication skills, with the ability to present ideas in a clear, concise, and organized manner.

Ability to work independently and exercise sound judgment within assigned governance responsibilities.

Ability to lead discussions with stakeholders and work collaboratively across departments.

Ability to adapt to changes in the regulatory environment and help shape evolving governance expectations and program responses.

Pr…