{"schemaVersion":"jobsearcher.job.v1","id":"5b44327c85bfbbf0ab10b3e3","url":"https://jobsearcher.com/jobs/5b44327c85bfbbf0ab10b3e3","canonicalUrl":"https://jobsearcher.com/jobs/5b44327c85bfbbf0ab10b3e3","title":"Audit, Technology","description":"About Column For companies building financial technology and transforming the financial services space, the biggest bottleneck to their growth and innovation is often the underlying banks and infrastructure stack they rely on. We have spent our careers founding and scaling companies like Plaid, Square, Meta, Blend, and Affirm, and have seen this problem firsthand — builders and developers needing to partner with traditional banks, and creating API and abstraction layers over the patchwork that is the bank, its core, and many other vendors. All of this results in a complex (and often expensive) banking supply chain involving a user, fintech, BaaS middleware provider, bank, core and the Federal Reserve.\nAt Column, we set out to simplify and fix this. We are a bank and a software company built from the ground up, offering builders and developers technology-forward banking solutions that cut out the hundreds of vendors, middleware providers, and abstraction layers. This means a safer, more transparent, and less costly banking supply chain. Come build with us!\nThe opportunity: Column runs on infrastructure we built ourselves, with no legacy banking core underneath it which means when something needs auditing, there's no vendor to point to and no black box to wave at examiners. We're looking for a high-agency audit professional to own that problem, with a focus on Information Technology and Security alongside core banking, BSA/AML, and fintech-specific risk.\nYou'll run the full audit lifecycle risk assessment, planning, fieldwork, reporting, follow-up working directly with Information Security, Engineering, Payments, BSA/AML, Compliance, Lending, Growth, and TPRM. This isn't a background function checking boxes after the fact: you'll be embedded with these teams as they build, and what you find will shape how Column governs itself while scaling a nationally chartered bank.\nThis role is based in our Presidio office in San Francisco and follows a 3-4-day/week, in-person schedule. You will report to Column's Head of Internal Audit.\nWhat you'll do: Design, lead, and execute end-to-end audits scoping, fieldwork, reporting, issue follow-up across core banking, technology, compliance, fintech partnerships, lending, payments, cards, and API infrastructure. Report findings straight to senior leadership.\n\nOwn a risk-based audit plan built for what Column actually is: a software company running a regulated bank. Evolve it as we grow.\n\nPartner directly with Engineering and Information Security to audit SDLC, data protection, IAM, cybersecurity, cloud infrastructure, AWS, and how AI is used in our development process.\n\nAudit third-party risk management and fintech partner oversight against regulatory expectations.\n\nUse data analytics and AI to surface emerging risks, automate testing, and make audit faster and more efficient.\n\nEvaluate risk and control effectiveness across IT/IS, BSA/AML, sanctions, fair lending, consumer protection, privacy, and ALM/interest rate risk grounded in NIST and regulatory expectations from the OCC, FRB, and FDIC.\n\nManage third-party audit staff to keep delivery sharp and on time.\n\nPartner with the Head of Internal Audit level up the function itself: Audit Committee materials, QA, risk assessment, metrics.\n\nWhat you'll need to be successful: 5-10 years of audit, risk, or compliance experience in banking, fintech, consulting, or technology\n\nReal technology audit depth IT risk, cybersecurity, modern software development, including how AI is changing the dev process\n\nHands-on audit ability in a cloud-native environment: AWS IAM, CI/CD, infrastructure as code (Terraform), secrets management\n\nComfortable pulling and interpreting data straight from CloudTrail, Datadog, and Okta via API or query, not just a dashboard\n\nWorking knowledge of BSA/AML, sanctions (KYC, CDD, SAR, OFAC), and core banking regulation (OCC, FRB)\n\nYou build trust fast — with engineers, senior leadership, and regulators\n\nCISA, CISSP, CIA, CISM, or CRISC certifications a plus\n\nWhat you'll get from us: Comprehensive health, dental, and vision plans, including options that are 100% covered by Column for you and 100% covered for your dependents!\n\nComprehensive family planning and fertility benefits via partnership with Carrot, including reimbursement of up to $20,000 in qualified expenses\n\nUp to $2,000 (post-tax) monthly rent subsidy for employees living within 2 miles of Column’s office\n\nFSA and HSA account options to enable use of pre-tax money for medical and dependent care expenses\n\n401k plan, including self-directed brokerage options\n\nFlexible time-off policy - take the time off that you want and need to relax and recharge\n\n100% paid parental leave, including 16 weeks for birth mothers, 12 weeks for primary caregivers, and 8 weeks for secondary caregivers\n\nUp to $4,500 in annual reimbursements for backup childcare\n\nCatered lunches and dinners for SF employees\n\nCommuter benefits, including paid transportation to-and-from the office\n\nRegular team building events, including annual offsite\n\nPay transparency: Compensation packages at Column include base salary, equity, and benefits. New hire offers are made based on a candidate's experience, expertise, geographic location, and internal pay equity relative to peers.\nThe annual US base salary range for this role is $150,000 - $200,000 + equity.\nWe look forward to hearing from you Column is committed to working with the best and brightest people from the broadest talent pool possible. We value bringing together a team with different perspectives, educational backgrounds, and life experiences, and believe a diversity of ideas is what allows us to develop the best solutions. All qualified individuals are encouraged to apply.\nIf you need assistance or a reasonable accommodation during the application and recruiting process, please reach out to accommodations@column.com.\nWe participate in the E-Verify program in certain locations as required by law. Learn more about the E-Verify programhere.\n\n#J-18808-Ljbffr","company":"Socket","rawCompany":"socket","city":"Millbrae","state":"CA","isRemote":false,"isActive":true,"createdAt":"2026-08-06T03:13:50.470Z","occupations":[{"code":"13-2011.00","title":"Accountants and Auditors","slug":"accountants-and-auditors"},{"code":"11-9199.02","title":"Compliance Managers","slug":"compliance-managers"},{"code":"11-3021.00","title":"Computer and Information Systems Managers","slug":"computer-and-information-systems-managers"}],"industries":[{"code":"513210","title":"Software Publishers","slug":"software-publishers"},{"code":"522320","title":"Financial Transactions Processing, Reserve, and Clearinghouse Activities","slug":"financial-transactions-processing-reserve-and-clearinghouse-activities"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Audit, Technology","description":"About Column For companies building financial technology and transforming the financial services space, the biggest bottleneck to their growth and innovation is often the underlying banks and infrastructure stack they rely on. We have spent our careers founding and scaling companies like Plaid, Square, Meta, Blend, and Affirm, and have seen this problem firsthand — builders and developers needing to partner with traditional banks, and creating API and abstraction layers over the patchwork that is the bank, its core, and many other vendors. All of this results in a complex (and often expensive) banking supply chain involving a user, fintech, BaaS middleware provider, bank, core and the Federal Reserve.\nAt Column, we set out to simplify and fix this. We are a bank and a software company built from the ground up, offering builders and developers technology-forward banking solutions that cut out the hundreds of vendors, middleware providers, and abstraction layers. This means a safer, more transparent, and less costly banking supply chain. Come build with us!\nThe opportunity: Column runs on infrastructure we built ourselves, with no legacy banking core underneath it which means when something needs auditing, there's no vendor to point to and no black box to wave at examiners. We're looking for a high-agency audit professional to own that problem, with a focus on Information Technology and Security alongside core banking, BSA/AML, and fintech-specific risk.\nYou'll run the full audit lifecycle risk assessment, planning, fieldwork, reporting, follow-up working directly with Information Security, Engineering, Payments, BSA/AML, Compliance, Lending, Growth, and TPRM. This isn't a background function checking boxes after the fact: you'll be embedded with these teams as they build, and what you find will shape how Column governs itself while scaling a nationally chartered bank.\nThis role is based in our Presidio office in San Francisco and follows a 3-4-day/week, in-person schedule. You will report to Column's Head of Internal Audit.\nWhat you'll do: Design, lead, and execute end-to-end audits scoping, fieldwork, reporting, issue follow-up across core banking, technology, compliance, fintech partnerships, lending, payments, cards, and API infrastructure. Report findings straight to senior leadership.\n\nOwn a risk-based audit plan built for what Column actually is: a software company running a regulated bank. Evolve it as we grow.\n\nPartner directly with Engineering and Information Security to audit SDLC, data protection, IAM, cybersecurity, cloud infrastructure, AWS, and how AI is used in our development process.\n\nAudit third-party risk management and fintech partner oversight against regulatory expectations.\n\nUse data analytics and AI to surface emerging risks, automate testing, and make audit faster and more efficient.\n\nEvaluate risk and control effectiveness across IT/IS, BSA/AML, sanctions, fair lending, consumer protection, privacy, and ALM/interest rate risk grounded in NIST and regulatory expectations from the OCC, FRB, and FDIC.\n\nManage third-party audit staff to keep delivery sharp and on time.\n\nPartner with the Head of Internal Audit level up the function itself: Audit Committee materials, QA, risk assessment, metrics.\n\nWhat you'll need to be successful: 5-10 years of audit, risk, or compliance experience in banking, fintech, consulting, or technology\n\nReal technology audit depth IT risk, cybersecurity, modern software development, including how AI is changing the dev process\n\nHands-on audit ability in a cloud-native environment: AWS IAM, CI/CD, infrastructure as code (Terraform), secrets management\n\nComfortable pulling and interpreting data straight from CloudTrail, Datadog, and Okta via API or query, not just a dashboard\n\nWorking knowledge of BSA/AML, sanctions (KYC, CDD, SAR, OFAC), and core banking regulation (OCC, FRB)\n\nYou build trust fast — with engineers, senior leadership, and regulators\n\nCISA, CISSP, CIA, CISM, or CRISC certifications a plus\n\nWhat you'll get from us: Comprehensive health, dental, and vision plans, including options that are 100% covered by Column for you and 100% covered for your dependents!\n\nComprehensive family planning and fertility benefits via partnership with Carrot, including reimbursement of up to $20,000 in qualified expenses\n\nUp to $2,000 (post-tax) monthly rent subsidy for employees living within 2 miles of Column’s office\n\nFSA and HSA account options to enable use of pre-tax money for medical and dependent care expenses\n\n401k plan, including self-directed brokerage options\n\nFlexible time-off policy - take the time off that you want and need to relax and recharge\n\n100% paid parental leave, including 16 weeks for birth mothers, 12 weeks for primary caregivers, and 8 weeks for secondary caregivers\n\nUp to $4,500 in annual reimbursements for backup childcare\n\nCatered lunches and dinners for SF employees\n\nCommuter benefits, including paid transportation to-and-from the office\n\nRegular team building events, including annual offsite\n\nPay transparency: Compensation packages at Column include base salary, equity, and benefits. New hire offers are made based on a candidate's experience, expertise, geographic location, and internal pay equity relative to peers.\nThe annual US base salary range for this role is $150,000 - $200,000 + equity.\nWe look forward to hearing from you Column is committed to working with the best and brightest people from the broadest talent pool possible. We value bringing together a team with different perspectives, educational backgrounds, and life experiences, and believe a diversity of ideas is what allows us to develop the best solutions. All qualified individuals are encouraged to apply.\nIf you need assistance or a reasonable accommodation during the application and recruiting process, please reach out to accommodations@column.com.\nWe participate in the E-Verify program in certain locations as required by law. Learn more about the E-Verify programhere.\n\n#J-18808-Ljbffr","datePosted":"2026-08-06T03:13:50.470Z","dateModified":"2026-08-06T03:13:50.470Z","hiringOrganization":{"@type":"Organization","name":"Socket","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Millbrae","addressRegion":"CA","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"5b44327c85bfbbf0ab10b3e3"},"url":"https://jobsearcher.com/jobs/5b44327c85bfbbf0ab10b3e3"}}