CardWorks

Risk

• Responsible for providing strategic leadership, oversight, and continuous enhancement of Merrick Bank’s Enterprise Risk Management (ERM) Program.
• Leads a team responsible for ensuring enterprise‑wide risks—including those arising from third‑party relationships—are effectively identified, assessed, monitored, and reported.
• Provides strategic oversight of the Third‑Party Risk Management (TPRM) program.
• Works across the first and second lines of defense to deliver clear, actionable enterprise and third‑party risk insights to senior management, risk committees, and the Board.
• Oversees enterprise risk assessments, risk appetite monitoring, key risk indicators (KRIs), and risk profile reporting.
• Aggregates and synthesizes risk information from multiple sources to identify emerging risks, trends, control gaps, and remediation status.
• Serves as a trusted enterprise and third‑party risk advisor to executive leadership and governance forums.
• Collaborates closely with Compliance, Credit Risk, Information Security, Legal, Vendor Management, and business leadership to strengthen risk governance, data quality, and risk mitigation outcomes.
• Leads, develops, and mentors high‑performing ERM and TPRM teams.
• Maintains and continuously improves the GRC system of record.

Vice President – Enterprise Risk Management

Technical Writer

• Support technical writing needs to facilitate daily business activities
• Develop, document, and update existing policies and procedures to adapt to a growing business
• Gather, collate, and organize all technical material to build comprehensive reports for various levels of management within the CardWorks organization
• Provide current documentation, revision histories, and tracking information to support Audit activities
• Ensure highest levels of accuracy, quality and effectiveness while scribing technical documents
• Create QA checklists / run books for use by technical teams to facilitate improved and accurate job performance
• Review documentation and provide editorial feedback to ensure format, style, voice, and clarity guidelines are met

Technical Writer II, Support Operations

Manager

• Lead the daily operations of a technical IAM controls team, ensuring consistent execution, accountability, and reliable delivery of detective access management services.
• Provide day‑to‑day leadership, supervision, and direction for a team responsible for IAM detective controls and automation.
• Set clear performance expectations, prioritize work, manage workload distribution, and support ongoing skill development of team members.
• Serve as the escalation point for complex operational issues, control failures, or security‑relevant findings.
• Ensure consistent execution of IAM detective control processes in alignment with policies, standards, and documented procedures.
• Ensure detective IAM controls operate effectively and consistently to identify unauthorized or inappropriate access in a timely manner.
• Oversee the execution of detective access management controls, including access certifications, authentication configuration reviews, access monitoring, and exception handling.
• Ensure controls effectively detect unauthorized access, inappropriate privilege assignments, and policy violations.
• Coordinate timely investigation, escalation, and remediation of access issues identified through detective controls.
• Actively supports monitoring, investigation, and response activities related to IAM security signals.
• Support detective IAM controls, including logging, alerting, and access review evidence collection.
• Monitor IAM and PAM activity for anomalous or unauthorized behavior
• Assist with identity‑related investigations, incidents, and penetration testing efforts.
• Drive improvements to control effectiveness, efficiency, and scalability through automation and process maturity.
• Maintain audit‑ready IAM detective controls that meet regulatory, risk, and internal security expectations.
• Collaborate with IAM engineering, security operations, infrastructure, and application teams to support access monitoring and control effectiveness.

Manager, Identity & Access Management

Analyst

• Investigates and analyzes credit card fraud dispute cases to mitigate financial losses and protect the Bank from fraudulent activity.
• Reviews and assesses credit card application risk indicators, correlating fraud-related flags to identify potential application fraud and emerging patterns.
• Conducts in-depth research on complex cases, including merchant activity and suspicious transaction behavior.
• Maintains comprehensive and well-documented case records, ensuring research finding and investigative conclusions are clearly articulated and supported.
• Communicates fraud analysis, investigative findings, and case determinations through digital channels and collaborative team discussions.
• Manages daily workflow by processing assigned queues, reports, and case tasks in a timely and accurate manner.
• Provides research support and account action recommendations, including potential account revocation, to front-line fraud prevention teams.

Vice President – Enterprise Risk Management

Technical Writer II, Support Operations

Manager, Identity & Access Management

Analyst II, Fraud Claim Investigations