Coastal

General

• Maintain project hygiene for assigned workstreams: action log, milestones, RAID (risks, assumptions, issues, dependencies), meeting notes, and status updates.
• Document current-state banking operations processes end-to-end through stakeholder interviews, walkthroughs, and artifact collection.
• Support process improvement by mapping workflows, identifying bottlenecks, and drafting proposed future-state steps with clear handoffs and controls.
• Assist with implementation readiness activities (operational checklists, UAT coordination, cutover planning support, post-change stabilization tracking).
• Create and update SOPs, runbooks, job aids, and playbooks used by Banking Operations teams.
• Track decisions, follow-ups, and open questions across Operations, Product/Engineering, and FinOps partners.
• Support partner launches and operational readiness via checklists, action logs, and cutover documentation.
• Support remediation/issue resolution workstreams by tracking work and documenting fixes (breaks, exceptions, SLA misses, backlog burn-down).
• Support payments and movement-of-funds operational changes (ACH, wires, returns, disputes, callbacks) through procedure updates and validation steps.
• Help document and improve case management and escalation workflows (intake, triage, handoffs).
• Contribute to audit/exam readiness by organizing evidence, mapping controls to procedures, and documenting current state.

Enablement Specialist I

Operations

• Collaborate with Operations Group in conducting research, review and analysis.
• Support new account opening and maintenance.
• Customize test scripts for all new partner programs and products.
• Validate test scripts prior to program or product launch.
• Provide in-depth support for Partners incoming emails and messages.
• Perform research, resolve issues and handle escalated inquiries.
• Monitor and analyze data related to file movements.
• Prepare required standard entries and dashboards.
• Provide Support for projects and initiatives.
• Perform daily review and research to resolve outstanding items related to account processing.
• Make recommendations to the Management regarding improvement in efficiency and current practices.
• Maintain proficient knowledge of the rules and regulations, including but not limited to, the Bank Secrecy Act (BSA), USA Patriot Act, OFAC, Regulation E, Truth In Savings Act and Unfair, Deceptive or Abusive Acts or Practices (UDAAP).
• Participate in internal committees and other meetings regarding the CCBX Partners.
• Compliance with all regulatory requirements

Operations Analyst

Compliance

• Respond to complaints (Regulatory Agency, Direct from Customers, etc.) accurately, thoroughly and timely. Identify potential regulatory risks while responding to complaints, formulate recommendations, and escalate internally, as needed. Work directly with regulators to respond to complaints and resolve escalated regulatory complaint issues.
• Monitor the complaint inbox/feeds for new complaints daily to ensure all complaints are responded to prior to their deadline.
• Open complaint cases utilizing a GRC tool for each new complaint, document the account and include all relevant information and documents.
• Prepare trend and root cause analysis to identify potentially regulatory issues. Prepare reporting related to regulatory complaints including monthly, quarterly and ad hoc reporting.
• Develop internal processes, procedures, and job aids.
• Support analysts in complex matters providing coaching.
• Assist on Compliance projects as assigned.
• Assist with requests from outside regulators and internal audit.
• Maintain proficient knowledge of the rules and regulations, including but not limited to, Regulation E, Truth in Savings Act, Unfair, Deceptive or Abusive Acts or Practices (UDAAP), FACTA, Reg Z-Truth in Lending, Reg B-Equal Credit Opportunity Act, Fair Credit Reporting Act.
• Builds and maintains strong relationships with key stakeholders and team members.
• Provide internal service in accordance with Coastal Core Values.
• Because we are a rapidly changing organization, there will be other duties as assigned.

Complaints Compliance Officer

• Support the Senior Compliance Director to develop, administer and monitor the implementation of a CMS that ensures the Bank’s compliance with all laws and regulations applicable to its operations and product offerings.
• Responsible for developing, implementing, and reporting on the monitoring and testing compliance program across the Core Bank and Fintech Partners, to provide oversight of compliance with federal, state, agency, and regulatory requirements.
• Assists in developing and maintaining a comprehensive assessment of compliance risks throughout the Bank’s operations.
• Develop and maintaining annual calendar of scheduled compliance testing and monitoring activities, informed by appropriate risk assessments.
• Evaluate identified issues, including conducting a root cause analysis, and recommendations to improve policies, procedures, potential efficiencies, and controls. Complete validation for completed issues.
• Develop clear and concise reporting of the results of compliance programs and communicate to Board, Management, Business Units and Partners.
• Manage a team of Compliance professionals. Responsible for hiring, coaching and development.
• Research, analyze, draw conclusions related to all federal and state rules and regulations and their applicability to Core Bank and Fintech Partners products, services, and systems.
• Serve as an in-house subject matter expert to provide compliance advice and guidance to relevant Core bank staff and Fintech Partners, while addressing any compliance questions.
• Assist with internal/external audit, and regulatory examinations requests.
• Follow and comply with all regulatory and compliance regulations.
• Provide internal service in accordance with Coastal Core Values.
• Because we are a rapidly changing organization, there will be other duties as assigned.

Assurance Compliance Director

Security Operations

• Own SIEM/SOAR strategy and daily operations; drive log onboarding, normalization, and high-fidelity detections across the entire technology landscape, including but not limited to: Core technology infrastructure: Active Directory Domain Services, Entra ID, Okta, Azure control plane, Zscaler, Windows and macOS endpoints, hybrid network, Productivity/G&A systems: M365, SaaS, Business-specific systems: Azure IaaS/PaaS services, custom-developed API services, banking core, financial ledger and reporting systems.
• Coordinate with Engineering and IT to build detection engineering into system development lifecycle.
• Develop, test, and maintain detection content (e.g., KQL/Sigma), alert routing, and enrichment pipelines that reduce noise and increase true-positive rates.
• Integrate threat intelligence (strategic, operational, and technical) into detections and response workflows.
• Serve as incident response commander for high-severity incidents; coordinate cross-functional responders in Infrastructure, IT, Engineering, Legal, and Compliance.
• Build, maintain, and continuously improve standard operating procedures (SOPs), runbooks, and playbooks.
• Maintain and exercise incident response plans through tabletop and similar activities.
• Mature evidence handling, forensics workflows, and case management; ensure accurate timelines and regulator-ready documentation.
• Drive post-incident reviews with measurable corrective actions (people/process/technology) and executive readouts.
• Own the vulnerability management lifecycle, ensuring coverage of vulnerability discovery, triage, and management across servers, endpoints, network, cloud subscriptions, containers/images, and custom APIs.
• Prioritize remediation using risk-based scoring and exploit intelligence.
• Track configuration and identity hygiene (e.g., privileged accounts, conditional access, MFA coverage, device compliance) and partner with owners to close gaps.
• Building and maturing a threat hunting and purple team function as part of the overall Security & Threat Operations maturation roadmap.
• Lead day-to-day oversight of the third-party SOC: queue hygiene, case quality, SLAs, runbook adherence, and continuous tuning to our environment.
• Ensure vendor tooling integrations, data retention, and access are compliant with Coastal policies and regulatory expectations.
• Establish operating rhythms (standups, metrics reviews, post-incident retrospectives) and standard operating procedures for response, containment, eradication, and recovery.
• Build and maintain a Security and Threat Operations strategy in coordination with the Director of Security Engineering and Operations, CISO, and other stakeholders, including software engineering, data engineering, and IT.
• Develop and report on KPIs and KRIs for the Security and Threat Operations function.
• Align SecOps processes to FFIEC/GLBA expectations and industry frameworks (NIST CSF and Cyber Risk Institute Profile).
• Prepare evidence for audits/exams; provide clear, actionable metrics and board-level reporting on SOC performance, incident trends, control coverage, and risk reduction.
• Partner with Legal, Compliance, Privacy, and Third-Party Risk on obligations and notifications.
• Coach analysts on analytical rigor, bias reduction, and structured investigations.
• Promote a blameless, learning-oriented culture that prizes speed, accuracy, and craftsmanship.

Cybersecurity Operations – Incident Response Lead

• Create oversight program for regulatory reporting, work with operations, advisory, business units/partners and IT to bridge gaps or provide compliance expertise.
• Lead improvement efforts to correct any gaps or deficiencies identified in internal reviews, audits, or regulatory examinations.
• Oversee and lead various task forces or discussion groups to address compliance related matters and develop enhancement strategies.
• Develop and implement approach for developing metrics and reporting.
• Analyze data and create presentations for the Board, Management and other stakeholders.
• Develop, revise, and implement Bank-wide compliance policies and procedures and address various compliance matters.
• Drive strategy for enhancing the Compliance Risk Assessment, including process, risk and control inventory management.
• Lead Compliance technology initiatives, managing relationship and execution
• Manage requests from outside regulators and internal audit.
• Maintain proficient knowledge of the rules and regulations, including but not limited to, Regulation E, Truth in Savings Act, Unfair, Deceptive or Abusive Acts or Practices (UDAAP), FACTA, Reg Z-Truth in Lending, Reg B-Equal Credit Opportunity Act, Fair Credit Reporting Act.
• Builds and maintains strong relationships with key stakeholders and team members.
• Provide internal service in accordance with Coastal Core Values.
• Because we are a rapidly changing organization, there will be other duties as assigned.

Compliance Governance Director

• Performs various and more complex monitoring and testing activities with minimal supervision, including the development of risk-based work papers, procedures, and templates, to validate the effectiveness of control activities and processes in accordance with the annual compliance monitoring and testing schedule.
• Document monitoring and testing activities accurately, thoroughly, and according to department standards that clearly communicate the objective, scope, and supports conclusions of test findings.
• Prepares effective communication reporting to summarize findings, including root cause analysis.
• Verify the implementation of remediation plans submitted by issue owners to verify that issues identified during monitoring or testing activities are remediated and fully address the root cause.
• Performs follow-up for the completion of action plans for issues identified in monitoring or testing activities to ensure completion is within target date timeframes. This includes following up for monthly status updates from action plan owners and updating the status in GRC tool.
• Identifies opportunities to use data analytics and statistical analyses to create automated testing of control activities and regulatory components.
• Perform complaint data analysis and evaluation to identify trends, compliance gaps and potential compliance risk exposure.
• Use social media listening tools and AI driven software to conduct marketing compliance monitoring and general on-going regulatory compliance monitoring.
• Maintain proficient knowledge of the rules and regulations, including but not limited to, Regulation E, Truth in Savings Act, Unfair, Deceptive or Abusive Acts or Practices (UDAAP), FACTA, Reg Z-Truth in Lending, Reg B-Equal Credit Opportunity Act, Fair Credit Reporting Act.
• Builds and maintains strong relationships with key stakeholders and team members.
• Assists with the completion of the annual compliance risk assessment.
• Provide internal service in accordance with Coastal Core Values.
• Because we are a rapidly changing organization, there will be other duties as assigned.

Assurance Compliance Officer

IT Support

• Provide support as needed to CCBX CCO and Credit Administration and other executives as needed
• Coordinates, manages, and maintains efficiencies and consistencies in credit approving, policies, reviewing, auditing, and analyzing of the credit products offered through the banks Strategic Lending Partners
• Assures documentation is complying within bank and CCBX policy as well as State and Federal Regulations
• Provide guidance to Strategic Lending Partners on credit structure, underwriting and specific request conditions
• Provide timely decisions on credit requests within delegated loan authority while maintaining proper due diligence
• Assist in preparing Board, management, and regulatory credit reports and analysis of the CCBX portfolio
• Coordinates, manages, and maintains consistencies in day-to-day Credit Risk Management and Credit Administration responsibilities
• Assures accuracy of credit analysis data through and internal control processes over credit data and queries of that data to ensure the correctness key performance indicators for loan metrics being reported.
• Review partner credit risks through all sources of data to ensure accuracy of analysis and make recommendations for any changes
• Coordinate and execute workload priorities and delegate tasks within deadlines
• Ability to use personal judgment and initiative to develop effective and constructive solutions to challenges and obstacles
• Manages and assists with special projects
• other duties as assigned