FinTech Risk & Controls Lead – BaaS

Coastal Community Bank; United States; Remote; USD 83,000 - 90,000; Full time

Benefits offered by this job

Medical Coverage

Health Savings Account (HSA)

401(k) Retirement Plan

Paid Time Off

Job summary

Coastal Community Bank seeks a Risk & Control Analyst III to lead and support audits of the BaaS program, developing risk assessments, scoping, and audit schedules, working with internal SMEs, partners, and auditors.

The role emphasizes risk-based approaches, timely remediation, and compliance with BSA, Patriot Act, OFAC, Regulation E, UDAAP, and related laws while strengthening Coastal’s BaaS controls framework.

Qualifications

• Bachelor’s Degree and 5+ years bank Internal Audit/IT Risk experience.
• Knowledge of FFIEC requirements and financial regulations is desirable.

Responsibilities

• Assist in developing processes to enhance BaaS Risk & Controls Program.
• Assist in creating and maintaining Partner Audit Risk assessments, focusing on key risks of the Partner and BaaS services.
• Facilitate Partner audits with external audit firms and internal teams.
• Coordinate scheduling Partner audits with audit firms and Fintech partners.
• Partner with SMEs to ensure audits address key risk to the BaaS program.
• Assist in evaluating and updating audit scopes for BSA, General, ITGC, IT Security, Deposit/ Lending, and Operational audits.
• Review engagement letters and audit reports to ensure scope and testing alignment.
• Monitor audit findings and remediation plans to ensure timely closure.

Skills

FinTech knowledge

Risk & Controls

Regulatory compliance

Analytical skills

Effective communicator

Organizational skills

Attention to detail

Team player

Education

Bachelor’s Degree or equivalent

Job description

Coastal Community Bank seeks a Risk & Control Analyst III to lead and support audits of the BaaS program, developing risk assessments, scoping, and audit schedules, working with internal SMEs, partners, and auditors.

The role emphasizes risk-based approaches, timely remediation, and compliance with BSA, Patriot Act, OFAC, Regulation E, UDAAP, and related laws while strengthening Coastal’s BaaS controls framework.