CardWorks

Vice President

• As a critical member of the DTD leadership team and in the capacity of a program/product/strategy lead, this Senior Vice President will expand the prior ‘chief of staff’ function provided by this role.
• Further, the broad mandate it maintains includes responsibility for creating and managing the planning and management framework for staffing and non-labor spend (full-time and contract staff);
• supporting the annual DTD budget process;
• and defining and executing against annual and multi-year strategic initiatives in support of all business priorities.
• In addition, this leader will lead and own projects/programs from the planning to the delivery elements – utilizing resources across DTD, along with aligning strategic partnerships with stakeholders and business leaders across CardWorks.

SVP, DTD Strategy – Planning

Risk

• Support and enhance the organization’s technology risk management, audit coordination, and IT control framework
• Coordinate audit preparation activities—including scheduling, evidence collection, and stakeholder communication—for internal audits and regulatory examinations (e.g., FDIC, SOX, SOC, and other technology-focused reviews)
• Serve as the primary liaison between Internal Audit, IT, and Compliance teams to ensure timely and accurate responses to audit inquiries
• Oversee and track remediation activities; validate completion and effectiveness of corrective actions for technology-related audit findings
• Conduct comprehensive Technology Risk Assessments, identifying inherent and residual risks across infrastructure, applications, security, and cloud environments
• Evaluate the design and operating effectiveness of technology controls, including IT General Controls (ITGCs), logical access, change management, operations, and security controls
• Perform independent control testing to verify compliance with policies, standards, and regulatory requirements
• Advise IT leadership on control gaps, deficiencies, risks, and recommended remediation strategies
• Provide risk insights for new initiatives, technology implementations, cloud migrations, and major IT projects
• Support enhancements to the IT risk management framework, control library, and GRC tooling
• Monitor emerging technology risks and collaborate with stakeholders to develop mitigating controls
• Contribute to the development and maintenance of IT policies, standards, and procedures.

Senior IT Risk Analyst

• Develop, implement, and maintain the Technology Risk Management Framework aligned with enterprise risk strategy, regulatory expectations, and industry frameworks (e.g., NIST, ISO, COBIT)
• Establish governance structures, processes, and routines to ensure consistent identification, assessment, monitoring, and escalation of technology risks
• Ensure alignment between technology risk governance and enterprise risk management programs
• Support Board and executive reporting by delivering clear, concise, and risk-based insights and recommendations
• Prepare quarterly, monthly and as needed technology risk reports for senior management and Board committees
• Translate complex technical and regulatory risk topics into business-relevant narratives for appropriate audiences
• Contribute to IT risk-related policies and standards, including but not limited to Security Policy and supporting standards
• Ensure policies align with internal control frameworks and applicable regulatory requirements (e.g., FDIC, SOC, SOX)
• Manage policy review cycles, updates, and approvals according to a defined governance schedule
• Drive consistent interpretation of technology policies across technology teams
• Develop and maintain key risk indicators (KRIs), metrics, and dashboards across technology risk domains
• Leverage metrics, incident data, and control performance to identify risk trends and emerging threats
• Continuously enhance risk metrics to improve transparency and decision-making

VP, IT Risk Management Governance – Policy

Communications

• Develop and execute media relations strategies that deepen awareness of CardWorks, Merrick Bank, and our branded credit cards (Merrick Bank & Ollo) across key national, financial, trade, and consumer press.
• Execute comprehensive awards submission program to elevate brand awareness and industry credibility.
• Identify conferences for company’s participation.
• Create compelling pitches, press releases, bylines, op-eds, and other media materials.
• Cultivate and maintain relationships with key journalists, podcasters, and influencers.
• Drive proactive storytelling tied to business priorities, credit access, financial inclusion, and regulatory trends.
• Partner with internal teams and external research firms to develop branded research (surveys, whitepapers, studies) that position the company as a leader in consumer finance and near-prime credit.
• Transform insights into content that fuels media coverage, investor interest, and B2B awareness.
• Support external platforms for senior leadership including CEO interviews, LinkedIn content, speaker opportunities, and awards programs.
• Develop messaging and briefing documents to ensure executives shine across media and public appearances.
• Support response strategies related to issues, risks, crises, or regulatory shifts.
• Help build the corporate narrative and messaging architecture.
• Work cross-functionally with internal partners across Legal, Investor Relations, HR, Marketing, Risk, and Product to ensure alignment on external communications.
• Bring fresh perspective and "outside the box" thinking to continuously evolve our approach.

AVP, External Communications

• Author and maintain data governance policies and procedures tailored to financial services regulations (e.g., GLBA, SOX, GDPR).
• Define SOPs for stewardship, quality management, metadata, and escalation protocols.
• Align governance documentation with enterprise standards such as the Enterprise Data Governance Policy (EDGP), Enterprise Data Management Standard (EDMS), and Records Retention Management Policy.
• Interface with organizational area heads to define governance needs and priorities.
• Facilitate Data Stewardship meetings to drive adoption of standards and resolve issues.
• Collaborate with the Director of Architecture on CardWorks Data Governance Toolkit.
• Mentor technical staff on Data Governance Policies & Procedures.

SVP, DTD Strategy – Planning

Senior IT Risk Analyst

VP, IT Risk Management Governance – Policy

AVP, External Communications

Director, Data Governance