CardWorks

Senior Privacy Analyst - Support & Governance

CardWorks$90K — $120K *
Finance & Insurance
5 - 7 years of experience
Job Overview by Ladders

Qualifications

  • Bachelor's degree in Business, Compliance, Risk Management, Legal Studies, Information Security, or related field preferred; equivalent relevant experience may be considered.
  • Seven (7+) years of compliance, banking, audit, or risk experience required.
  • Experience with data governance, information security, or privacy-related processes preferred.
  • Experience performing risk assessments or governance oversight required.
  • Experience supporting or building compliance programs aligned with regulatory expectations preferred.
  • Advanced knowledge of banking, privacy, and data protection laws and regulations.
  • Relevant privacy, compliance, or risk certifications preferred, such as CIPP or CISA.

Responsibilities

  • Own and maintain components of the privacy and compliance governance frameworks.
  • Establish and maintain standards and procedures for governance areas.
  • Provide oversight of privacy risk assessments and governance reviews.
  • Review issues and compliance matters for documentation readiness.
  • Drive remediation and continuous improvement initiatives.
  • Monitor milestone progression and escalate governance concerns as needed.
  • Partner with various stakeholders to support governance standards.

Benefits

  • Competitive Pay, including a Bonus Target or Variable Pay Incentive Program
  • Comprehensive Benefits Package - Medical, Dental, and Vision
  • 401(k) Plan with Company Match
  • Short- & Long-Term Disability
  • Wellness Programs
  • Paid Vacation, Sick Days and Bank Holidays
  • Employee Engagement Activities including Employee Appreciation Day and DEI Employee Resource Groups
Full Job Description
Essential Functions:
  • Own and maintain assigned components of the privacy and compliance governance frameworks, including data inventories, privacy impact assessments, issue management, complaint governance, regulatory change management, and testing standards, as applicable.
  • Establish, revise, and maintain standards, procedures, templates, methodologies, inventories, and related documentation for assigned governance areas.
  • Provide oversight and challenge of enterprise privacy risk assessments, monitoring activities, and other governance reviews to evaluate program effectiveness, identify control weaknesses, and support risk-based oversight, Identify potential control gaps, assess adherence to governance expectations, and track remediation activities through resolution.
  • Review assigned issues, findings, and compliance matters to confirm appropriate ownership, classification, documentation quality, and readiness for escalation or closure.
  • Drive remediation, program enhancements, and continuous improvement initiatives.
  • Monitor milestone progression, support adherence to governance timelines, and escalate recurring quality concerns, missed milestones, governance breaches, or systemic issues, as appropriate.
  • Partner with Compliance, Information Security, Legal, IT, business units, and other stakeholders to support consistent application of privacy and compliance governance standards.
  • Support privacy reviews, governance reporting, key risk indicator tracking, audits, and regulatory examinations.
  • Perform other duties as assigned.


Requirements for Success:

Education & Experience:
  • Bachelor's degree in Business, Compliance, Risk Management, Legal Studies, Information Security, or related field preferred; equivalent relevant experience may be considered.
  • Seven (7+) years of compliance, banking, audit, or risk experience required
  • Experience with data governance, information security, or privacy-related processes within a regulated financial services environment preferred.
  • Experience performing risk assessments or governance oversight required
  • Experience supporting or building compliance programs aligned with regulatory expectations (e.g., GLBA, data privacy, or information security frameworks) preferred


Knowledge, Skills and Capabilities:
  • Advanced knowledge of banking, privacy, and data protection laws and regulations.
  • Relevant privacy, compliance, or risk certifications preferred, such as CIPP, CIPM, CIPT, CISA, or CRCM.
  • Strong analytical and problem-solving skills, with the ability to assess complex issues, identify root causes, and formulate sound recommendations.
  • Ability to plan, organize, and prioritize multiple simultaneous assignments while managing to time-sensitive deadlines.
  • Effective written and verbal communication skills, with the ability to present ideas in a clear, concise, and organized manner.
  • Ability to work independently and exercise sound judgment within assigned governance responsibilities.
  • Ability to lead discussions with stakeholders and work collaboratively across departments.
  • Ability to adapt to changes in the regulatory environment and help shape evolving governance expectations and program responses.
  • Professional judgment, integrity, and accountability in handling confidential or sensitive matters.
  • Ability to assess governance effectiveness, identify systemic risks, and drive program enhancements.
  • Proficiency in Microsoft Office applications, including Excel, Word, and PowerPoint.


Compliance with Laws & Regulations
  • Responsible for complying with all the Bank's internal control policies and procedures.
  • Responsible for understanding and complying with all laws and regulations to which the Bank is subject.
  • Responsible for communicating problems in operations, noncompliance with the code of conduct, noncompliance with laws and regulations, policy violations, or illegal acts.


Work Environment/Physical Demands:
  • Work is in an office environment, sustained posture in a seated position for prolonged periods of time; works with computer equipment for prolonged periods of time.
  • Some stress may occur
  • Travel is generally not required


Our Employee Value Proposition
  • Competitive Pay, including a Bonus Target or Variable Pay Incentive Program
  • Benefits Package -Medical, Dental, and Vision (plus much more)
  • 401(k) Plan with Company Match
  • Short- & Long-Term Disability
  • Wellness Programs
  • Group Life and AD&D Insurance
  • Paid Vacation, Sick Days and bank Holidays
  • Employee Engagement Activities including Employee Appreciation Day, DEI Employee Resource Groups, Corporate Social Responsibility, Service Recognition


We offer a total rewards package comprised of a competitive base rate of pay, variable pay incentive programs based on the role, and a comprehensive benefit suite. Offered rates of pay are determined based on job-related knowledge, relevant experience, skills, certifications, and geographic location.

About CardWorks

CardWorks is a financial services company that provides a range of credit card and loan products to consumers. The company was founded in 1987 and is headquartered in New Haven, Connecticut. CardWorks offers credit cards, personal loans, and merchant services through its various subsidiaries, including Merrick Bank, Continental Finance, and Genesis Financial Solutions. The company has a focus on serving consumers with less-than-perfect credit, and its products are designed to help customers build or rebuild their credit scores. CardWorks has over 1,000 employees and is committed to providing excellent customer service and innovative financial solutions.
Learn more about CardWorks
Size
1,000 employees
Industry
Founded
1987

Similar Jobs

More Jobs at CardWorks

More Finance & Insurance Jobs

Find similar Senior Privacy Analyst - Support & Governance jobs: