{"id":2107708,"url":"https://alion.io/job/cardworksfinancialgroup-manager-security-compliance","title":"Manager, Security Compliance","company":{"id":3913490,"name":"Cardworksfinancialgroup","domain":"cardworksfinancialgroup.com","url":"https://alion.io/company/cardworksfinancialgroup","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":75,"open_postings":3,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-31T05:58:55Z"}},"role":"Management","role_family":"Management","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":["United States"],"countries":["US"],"hiring_countries":["US","JO"],"hiring_countries_total":2,"salary":{"min":128490,"max":142767,"currency":"USD","period":"year","gross":null,"usd_annual":142767},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"NIST CSF","optional":false},{"name":"PCI DSS","optional":false}],"status":"live","first_seen_at":"2026-05-22T00:00:00Z","employer_posted_date":"2026-05-22","last_verified_at":"2026-10-31T09:21:21Z","board_verified":true,"closed_at":null,"days_open":162,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":162},"description":"Become an everyday champion - and build a career where your impact fuels financial progress.\n\nWhat We Do\nCardWorks Financial Group is a diversified financial services platform building ethical solutions across credit, lending, and the full customer lifecycle. Through our family of companies, CardWorks Financial Group tackles the complex challenges that larger financial institutions leave behind. We’re embedded throughout the credit card ecosystem as a lender, servicer, and merchant acquirer.\nWho We Are\nMerrick Bank: The bank that builds\nCardWorks Servicing: One partner, total performance\nCarson Smithfield: Resolution with respect\nWith nearly 40 years of operating history, our track record is solid: disciplined in downturns and built to accelerate in recovery. The CardWorks Financial Group companies take precise approach in complex markets, as a top three non-prime focused general purpose card issuer and a top fifteen U.S. merchant acquirer.\nOur team tackles the industry’s most complex credit and payment challenges. And we believe that excellent work starts with a team that feels supported, respected, and empowered to grow.\nCardWorks Servicing, LLC provides end-to end operational servicing functions for credit cards, secured cards, and installment loans. We service consumer and small business loans across the credit spectrum and offersbackup servicing and due diligence services to capital providers and trustees.\nFounded in 1997, Merrick Bank is an FDIC®-insured financial institution headquartered in South Jordan, Utah, with over $10 billion in assets. A wholly owned subsidiary of CardWorks Financial Group, Merrick Bank serves roughly five million cardmembers and more than 100,000 merchant customers, offering credit cards, recreational loans, deposit accounts, merchant services and bank sponsorships to consumers and businesses.\nCarson Smithfield, LLC provides a variety of post-charge-off debt recovery services, including digital self-service, IVR, live agent, and external agency management.\nPosition Summary:\nThe Security Compliance Manager is an individual contributor responsible for operationalizing, executing, and maturing the enterprise security compliance program. This role reports to the Director of Security Risk & Compliance and ensures that the organization’s security compliance strategy is translated into effective operational processes, assessments, and workflows. Core responsibilities include managing compliance operations, executing assessments, reviewing controls, supporting audit readiness, coordinating documentation and evidence, and ensuring accuracy and consistency across compliance systems and reporting.\nEssential Functions:\nCompliance Program Execution\nExecute and continuously improve enterprise security compliance processes and assessments, supporting the strategic direction established by the Manager.\nOperate and maintain the security compliance technology platform, ensuring assessments, evidence collection, and issue tracking are completed accurately and on schedule.\nCoordinate compliance assessment activities and ensure required documentation is complete and aligned with standards.\nCreate, manage, and maintain standardized templates, procedures, workflows, and reporting to support consistent compliance operations.\nSecurity Exception Management\nExecute detailed assessments of security exception requests, documenting risks, mitigating controls, approvals, and expiration tracking, in accordance with governance defined by the Director.\nTrack exception approvals, expirations, and remediation requirements, ensuring timely reminders, escalations, and accuracy of exception data.\nSecurity Issue Escalation & Tracking\nManage execution of the Security Compliance Finding and Issue Escalation process, ensuring control gaps and audit findings are documented, monitored, and remediated on schedule.\nMaintain and operationalize workflow steps aligned to governance requirements defined by the Director, ensuring appropriate escalation of overdue or high-risk issues.\nAlign information security issue tracking with Enterprise Risk Management processes and escalate high-risk issues through established governance forums.\nDocumentation Governance\nOversee the Information Security documentation governance program, ensuring policies, standards, procedures, and guidelines are accurate, current, and aligned with regulatory, customer, and internal control requirements.\nImplement and maintain the documentation lifecycle processes, including drafting, review, approval, publication, version control, retention, and retirement.\nCoordinate updates to documentation to ensure alignment with applicable frameworks such as CRI, NIST CSF, PCI DSS, and CIS 18, reflecting changes in technology, controls, and risk posture.\nTrack documentation quality, exceptions, gaps, and remediation activities; prepare reports and metrics to support leadership visibility and compliance oversight.\nPartner with security, risk, IT, and compliance stakeholders to ensure documentation supports audits, assessments, and ongoing control operation.\nEducation and Experience\n8+ years of experience in information security, risk management, compliance, or related disciplines.\nBachelor’s degree in IT or related field preferred or equivalent work experience in lieu of degree.\nWorking knowledge of security frameworks such as Cyber Risk Institute, NIST CSF, CIS Controls, and PCI DSS along with experience applying these and other industry-specific regulations to projects and infrastructure.\nExperience in collaborating across diverse teams, including IT, business units, and external stakeholders, to address security requirements and align with project objectives.\nStrong understanding of security risk assessment methodologies, controls implementation, and process optimization, with a track record of successfully mitigating risks and enhancing security practices.\nSummary of Qualifications:\nStrong working knowledge of major security frameworks and regulatory requirements, including CRI, NIST CSF, PCI DSS, and CIS Controls, with experience aligning compliance platforms to support assessments and evidence management.\nSkilled in optimizing compliance workflows, dashboards, templates, and reporting to enhance operational efficiency and audit readiness.\nProficient with core security technologies such as vulnerability management, encryption, and identity and access management.\nStrong analytical and communication skills, able to identify trends, explain complex technical and regulatory concepts, and support cross-functional collaboration.\nHighly organized, detail-oriented, and capable of managing multiple priorities while improving processes, automation, and program scalability.\nIdeally, the qualified candidate will work at the following location(s): Woodbury, NY; South Jordan, UT; Horsham, PA; Pittsburgh, PA; Orlando, FL. A hybrid work model or fully remote model can be considered based on hiring manager decision and priorities of the role.\nThe salary range for this position, if located in NY Metro/NY State is $128,490 to $142,767. However, please note that the salary range will vary for other geographic areas.\n Our Employee Value Proposition\nCompetitive Pay, including a Bonus Targetor Variable Pay Incentive Program\nBenefits Package -Medical, Dental, and Vision (plus much more)\n401(k) Plan with Company Match\nShort- & Long-Term Disability\nWellness Programs\nGroup Life and AD&D Insurance\nPaid Vacation, Sick Daysand bank Holidays\nEmployee Engagement Activitiesincluding Employee Appreciation Day, DEI Employee Resource Groups, Corporate Social Responsibility, Service Recognition\nWe offer a total rewards package comprised of a competitive base rate of pay, variable pay incentive programs based on the role, and a comprehensive benefit suite. Offered rates of pay are determined based on job-related knowledge, relevant experience, skills, certifications, and geographic location.\nWe are proud to be an equal opportunity employer. All qualified applicants will receive consideration without regard to age, race, color, sex, or gender identity/expression (including pregnancy, childbirth, transgender status, or sexual orientation), religion or creed, ancestry, citizenship, national origin, disability, military or veteran status, marital status, genetic information, or any other characteristic protected by applicable law.\nWe do not tolerate discrimination, harassment, or retaliation. Employment decisions are based solely on qualifications, merit, and business needs. Everyone is welcome here, and we hire based on your ability to do the job, not any protected characteristics.\nIf you need help or reasonable accommodation during the application or hiring process, please let your TA Partner know.","description_format":"text","description_chars":8771,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Hybrid work","Wellness"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"Jordan","iso":"JO","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Security Compliance","Financial Services","Consumer Loans & Pawnshops"],"lifecycle":[{"event":"open","at":"2026-10-08T21:00:09Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 1","filings_12m":1,"filings_prev_12m":1,"green_card_filings_12m":0,"median_offered_wage_usd":117500,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":7,"band":"cold","label":"Long shot","p_open":1,"p_active":0.265,"p_room":0.28,"age_days":162,"expected_fill_days":29,"reasons":["conf:9","win:tail","crowd:"],"computed_at":"2026-10-31T05:58:55Z"},"pay":{"stated_usd_annual":142767,"is_top_pay":false},"html_url":"https://alion.io/job/cardworksfinancialgroup-manager-security-compliance","json_url":"https://alion.io/job/cardworksfinancialgroup-manager-security-compliance.json","meta":{"generated_at":"2026-10-31T16:40:45Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":26106,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3913490},"rest":"https://alion.io/mcp/rest/get_company?id=3913490"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcardworksfinancialgroup-manager-security-compliance"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcardworksfinancialgroup-manager-security-compliance"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcardworksfinancialgroup-manager-security-compliance"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cardworksfinancialgroup-manager-security-compliance\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcardworksfinancialgroup-manager-security-compliance"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2107708}},{"tool":"search_jobs","arguments":{"company":"cardworksfinancialgroup.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2107708},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}