Audit, Technology

About the role

We are a bank and a software company built from the ground up, offering technology-forward banking solutions that cut out the hundreds of vendors, middleware providers, and abstraction layers. This means a safer, more transparent, and less costly banking supply chain.

Responsibilities

• Design, lead, and execute end-to-end audits — scoping, fieldwork, reporting, issue follow-up — across core banking, technology, compliance, fintech partnerships, lending, payments, cards, and API infrastructure.
• Report findings straight to senior leadership.
• Own a risk-based audit plan built for what Column actually is: a software company running a regulated bank.
• Evolve it as we grow.
• Partner directly with Engineering and Information Security to audit SDLC, data protection, IAM, cybersecurity, cloud infrastructure, AWS, and how AI is used in our development process.
• Audit third-party risk management and fintech partner oversight against regulatory expectations.
• Use data analytics and AI to surface emerging risks, automate testing, and make audit faster and more efficient.
• Evaluate risk and control effectiveness across IT/IS, BSA/AML, sanctions, fair lending, consumer protection, privacy, and ALM/interest rate risk — grounded in NIST and regulatory expectations from the OCC, FRB, and FDIC.
• Manage third-party audit staff to keep delivery sharp and on time.
• Partner with the Head of Internal Audit level up the function itself: Audit Committee materials, QA, risk assessment, metrics.

Requirements

• 5-10 years of audit, risk, or compliance experience in banking, fintech, consulting, or technology.
• Real technology audit depth — IT risk, cybersecurity, modern software development, including how AI is changing the dev process.
• Hands-on audit ability in a cloud-native environment: AWS IAM, CI/CD, infrastructure as code (Terraform), secrets management.
• Comfortable pulling and interpreting data straight from CloudTrail, Datadog, and Okta — via API or query, not just a dashboard.
• Working knowledge of BSA/AML, sanctions (KYC, CDD, SAR, OFAC), and core banking regulation (OCC, FRB).

Qualifications

• You build trust fast — with engineers, senior leadership, and regulators.

Skills

• CISA, CISSP, CIA, CISM, or CRISC certifications a plus.

Benefits

• Comprehensive health, dental, and vision plans, including options that are 100% covered by Column for you and 100% covered for your dependents!
• Comprehensive family planning and fertility benefits via partnership with Carrot, including reimbursement of up to $20,000 in qualified expenses.
• Up to $2,000 (post-tax) monthly rent subsidy for employees living within 2 miles of Column’s office.
• Payment card rewards program.
• Flexible time-off policy - take the time off that you want and need to relax and recharge.
• 100% paid parental leave, including 16 weeks for birth mothers, 12 weeks for primary caregivers, and 8 weeks for secondary caregivers.
• Up to $4,500 in annual reimbursements for backup childcare.
• Regular team building events, including annual offsite.

Pay

The annual US base salary range for this role is $150,000 - $200,000 + equity. We look forward to hearing from you.

Schedule

This role is based in our Presidio office in San Francisco and follows a 3-4-day/week, in-person schedule.