Audit

About Column

For companies building financial technology and transforming the financial services space, the biggest bottleneck to their growth and innovation is often the underlying banks and infrastructure stack they rely on. We have spent our careers founding and scaling companies like Plaid, Square, Meta, Blend, and Affirm, and have seen this problem firsthand — builders and developers needing to partner with traditional banks, and creating API and abstraction layers over the patchwork that is the bank, its core, and many other vendors. All of this results in a complex (and often expensive) banking supply chain involving a user, fintech, BaaS middleware provider, bank, core and the Federal Reserve.

At Column, we set out to simplify and fix this. We are a bank and a software company built from the ground up, offering builders and developers technology-forward banking solutions that cut out the hundreds of vendors, middleware providers, and abstraction layers. This means a safer, more transparent, and less costly banking supply chain. Come build with us!

The opportunity:

Column runs on infrastructure we built ourselves, with no legacy banking core underneath it — which means when something needs auditing, there's no vendor to point to and no black box to wave at examiners. We're looking for a high-agency audit professional to own that problem, with a focus on Information Technology and Security alongside core banking, BSA/AML, and fintech-specific risk.

You'll run the full audit lifecycle — risk assessment, planning, fieldwork, reporting, follow-up — working directly with Information Security, Engineering, Payments, BSA/AML, Compliance, Lending, Growth, and TPRM. This isn't a background function checking boxes after the fact: you'll be embedded with these teams as they build, and what you find will shape how Column governs itself while scaling a nationally chartered bank.

This role is based in our Presidio office in San Francisco and follows a 3-4-day/week, in-person schedule. You will report to Column's Head of Internal Audit.

 

What you'll do:

• Design, lead, and execute end-to-end audits — scoping, fieldwork, reporting, issue follow-up — across core banking, technology, compliance, fintech partnerships, lending, payments, cards, and API infrastructure. Report findings straight to senior leadership.

• Own a risk-based audit plan built for what Column actually is: a software company running a regulated bank. Evolve it as we grow.

• Partner directly with Engineering and Information Security to audit SDLC, data protection, IAM, cybersecurity, cloud infrastructure, AWS, and how AI is used in our development process.