VP Cyber Security Enterprise Architect

Join our team - and take the next step in achieving a fulfilling career!

What We Do

At CardWorks, we aim to help people connect with possibility and opportunity using our financial servicing expertise. Building meaningful, long-term relationships with consumers, our employees, and our clients is what matters most.

Who We Are

CardWorks, Inc. is a diversified consumer finance service provider and parent company of CardWorks Servicing, LLC, Merrick Bank and Carson Smithfield, LLC.

CardWorks Servicing, LLC provides end-to end operational servicing functions for credit cards, secured cards, and installment loans.  We service consumer and small business loans across the credit spectrum and offers backup servicing and due diligence services to capital providers and trustees.

Merrick Bank is an FDIC-insured Utah Industrial Loan Bank.  Merrick operates three main business lines:  credit cards, recreational lending, and merchant services.

Carson Smithfield, LLC provides a variety of post-charge-off debt recovery services, including digital self-service, IVR, live agent, and external agency management.

Position Summary:

This VP-level Enterprise Cybersecurity Architect leads the definition and evolution of enterprise-wide security strategy, frameworks for CardWorks and Merrick Bank, a combined mid-size bank and financial services enterprise. By integrating security architecture with business goals, this role implements comprehensive controls across both cloud and on-premise environments without compromising employee productivity or quality of life.

CardWorks and Merrick Bank are committed to safeguarding customer data and internal IT assets and maintaining a robust cybersecurity posture. This role is crucial in shaping and maintaining the security architecture of the entire enterprise. This includes designing, overseeing implementation, and overseeing secure IT systems and processes. The Cybersecurity Architect ensures compliance with industry regulations and best practices. Cardworks/Merrick values innovation, security, and a collaborative work environment.

Essential Functions:

Cyber Security Strategy & Architecture:

• Own the enterprise security architecture framework, continuously evolving it to address new threats.

• Design comprehensive security architectures, strategies, policies, and standards to align with business objectives and regulatory requirements (e.g., NIST CSF, GLBA, SOC2, PCI, FFIEC).

• Develop and maintain security architecture and supporting documentation.

• Identify and communicate emerging security threats to the CISO and other senior business leaders. 

• Assess latest cybersecurity technologies, trends, and developments.  Communicate this to the Office of the CISO for relevance and potential integration. 

• Work with all technology teams to assist with secure designs, including but not limited to: Network design, Application, cloud, data transfer, pci, secure end user compute , access controls, vendor monitoring, etc.

Security Design & Implementation:

• Partner with software development, engineering, and infrastructure teams to integrate security-by-design principles into all phases of solution delivery, including DevSecOps pipelines, cloud, and on-premise network architecture.

• Design security patterns and controls to promote enterprise efficiency and transparency.  This includes the addition and maintenance of automation, where possible, to increase efficiency for compliance audits and daily processes for security assurance.

• Evaluate security architecture and security control baselines for all technology within the enterprise. Identify design gaps and recommend changes/enhancements.

Leadership & Mentorship:

• Provide expert guidance and consultation related to security matters across the organization, particularly for the senior members of the Cybersecurity Team and IT leadership.

• Coach and mentor less experienced personnel on cybersecurity principles and implementation, fostering a culture of security best practice.

• May require leading a small team of architects and/or engineers directly or through a dotted-line relationship.

• Prepare and deliver senior management-level presentations to communicate trends, threats, and current security posture.

• Partner with Cybersecurity Solutions