Audit, Technology
Lead end-to-end technology and compliance audits for a chartered bank and fintech platform. Partner directly with Engineering and InfoSec on SDLC, cloud infrastructure, AI usage, and regulatory controls in a cloud-native environment.
About the job
What you'll do
- Design, lead, and execute end-to-end audits — scoping, fieldwork, reporting, issue follow-up — across core banking, technology, compliance, fintech partnerships, lending, payments, cards, and API infrastructure. Report findings straight to senior leadership.
- Own a risk-based audit plan built for what Column actually is: a software company running a regulated bank. Evolve it as we grow.
- Partner directly with Engineering and Information Security to audit SDLC, data protection, IAM, cybersecurity, cloud infrastructure, AWS, and how AI is used in our development process.
- Audit third-party risk management and fintech partner oversight against regulatory expectations.
- Use data analytics and AI to surface emerging risks, automate testing, and make audit faster and more efficient.
- Evaluate risk and control effectiveness across IT/IS, BSA/AML, sanctions, fair lending, consumer protection, privacy, and ALM/interest rate risk — grounded in NIST and regulatory expectations from the OCC, FRB, and FDIC.
- Manage third-party audit staff to keep delivery sharp and on time.
- Partner with the Head of Internal Audit level up the function itself: Audit Committee materials, QA, risk assessment, metrics.
What you'll need to be successful
- 5-10 years of audit, risk, or compliance experience in banking, fintech, consulting, or technology
- Real technology audit depth — IT risk, cybersecurity, modern software development, including how AI is changing the dev process
- Hands-on audit ability in a cloud-native environment: AWS IAM, CI/CD, infrastructure as code (Terraform), secrets management
- Comfortable pulling and interpreting data straight from CloudTrail, Datadog, and Okta — via API or query, not just a dashboard
- Working knowledge of BSA/AML, sanctions (KYC, CDD, SAR, OFAC), and core banking regulation (OCC, FRB)
- You build trust fast — with engineers, senior leadership, and regulators
- CISA, CISSP, CIA, CISM, or CRISC certifications a plus
What you'll get from us
- Comprehensive health, dental, and vision plans, including options that are 100% covered by Column for you and 100% covered for your dependents!
- Comprehensive family planning and fertility benefits via partnership with Carrot, including reimbursement of up to $20,000 in qualified expenses
- Up to $2,000 (post-tax) monthly rent subsidy for employees living within 2 miles of Column’s office
- FSA and HSA account options to enable use of pre-tax money for medical and dependent care expenses
- 401k plan, including self-directed brokerage options
- Flexible time-off policy - take the time off that you want and need to relax and recharge
- 100% paid parental leave, including 16 weeks for birth mothers, 12 weeks for primary caregivers, and 8 weeks for secondary caregivers
- Up to $4,500 in annual reimbursements for backup childcare
- Catered lunches and dinners for SF employees
- Commuter benefits, including paid transportation to-and-from the office
- Regular team building events, including annual offsite
Pay transparency: The annual US base salary range for this role is $150,000 - $200,000 + equity.
Skills
Audit, Risk Assessment, Cybersecurity, AWS, IAM, Terraform, CI/CD, Bsa/Aml, SDLC, Cloudtrail, Datadog, Okta, Nist, Cisa, Cissp
Similar jobs
Fluidstack
Austin, TXOwn and maintain Primavera P6 CPM schedules, cost tracking, and productivity reporting for greenfield hyperscale data center construction projects. Drive critical path compression, lead reviews with GCs/executives, and deliver defensible as-built records on $500M+ programs.
OpenAI
San Francisco, CA
Leads child safety investigations, enforcement decisions, mandatory-reporting workflows, and process improvements involving sensitive content and abuse signals. The role requires Trust & Safety investigation experience, sound judgment, strong documentation, and cross-functional collaboration.
Fluidstack
Austin, TXSupply Chain Buyer responsible for executing purchases, managing order books, resolving vendor issues, and maintaining ERP data accuracy to support rapid data center buildout for AI compute infrastructure. Requires experience as a buyer in fast-moving supply chains, heavy PO management, expediting, and strong ERP hygiene.
Gusto
San Francisco, CALead configuration, optimization, reporting, and support for Workday HCM, Payroll, and related modules to power HR and payroll processes at Gusto. Requires 5-7 years of hands-on Workday experience, advanced knowledge of security, business processes, and reporting, plus a bachelor's degree.
Axle
Rockville, MD
Conduct HIV, cellular, and molecular biology research supporting NIH laboratory programs, including CRISPR/Cas9 gene editing, cell culture, assay development, data interpretation, and statistical analysis. Requires a master's degree and at least five years of laboratory experience.