Responsibilities
- Lead the development and execution of a risk-focused internal audit plan covering all aspects of stablecoin operations, including issuance, redemption, reserve management, custody, key management, on-ramps and off-ramps, and integration with payment systems and banking partners, ensuring adherence to OCC 12 CFR Part 0.
- Evaluate fiduciary frameworks for trust and custodial offerings, including those under Regulation 9, by testing governance structures, compliance protocols, treasury functions, financial reporting accuracy, reconciliation processes, technology systems, risk oversight, and operational controls specific to stablecoin and trust banking activities.
- Conduct audits that combine blockchain-based evidence, on-chain transaction analysis, and traditional financial auditing methods to generate reliable insights and recommendations.
- Deliver independent, objective assessments directly to the Audit Committee and Board, clearly explaining the strength of internal controls, risk mitigation strategies, and governance practices, particularly regarding complex technical and regulatory challenges.
- Act as the main internal audit liaison for regulatory agencies such as the OCC, state banking departments, and FinCEN, coordinating submissions, responding to supervisory findings like MRIAs and MRAs, and providing audit evidence to support regulatory confidence.
- Collaborate with executive leadership and teams across engineering, product, treasury, legal, compliance, and operations to convert audit outcomes into sustainable corrective actions, strengthen controls, and ensure full tracking to resolution.
Responsibilities
- Lead and execute a risk-based internal audit strategy providing end-to-end coverage for stablecoin activities—including issuance and redemption flows, treasury and reserve management, custody and key management, on-ramps and off-ramps, and interoperability with payment rails and banking partners—in full compliance with OCC 12 CFR Part 30 (Heightened Standards).
- Audit key fiduciary frameworks applicable to trust and custodial products (including those subject to Regulation 9), assessing and testing governance, compliance, treasury, financial reporting, reconciliation, technology, risk management, and operational controls unique to stablecoin programs and trust banking to ensure design and operating effectiveness.
- Coordinate audits that integrate on-chain evidence, blockchain analytics, and transaction tracing with traditional financial audit techniques to produce objective findings and recommendations.
- Present independent, objective reports directly to the Audit Committee and Board on the effectiveness of internal controls, risk management, and governance processes, communicating complex technical and regulatory risks to senior stakeholders in clear, actionable terms.
- Serve as the primary IA point of contact for regulators (e.g., OCC, state banking agencies, FinCEN), industry-standard bodies, and network partners—managing submission of materials, responding to Supervisory Letters and exam findings such as MRIAs and MRAs, and presenting audit evidence and findings to enhance confidence in oversight of stablecoin programs.
- Partner with senior management and cross-functional teams—including engineering, product, treasury, legal, compliance, and operations—to translate audit findings into durable, structured remediation plans with control enhancements, tracking all corrective actions to verified closure.
