Third Party Compliance

About Column

For companies building financial technology and transforming the financial services space, the biggest bottleneck to their growth and innovation is often the underlying banks and infrastructure stack they rely on. We have spent our careers founding and scaling companies like Plaid, Square, SoFi, Blend, and Affirm, and have seen this problem firsthand — builders and developers needing to partner with traditional banks, and creating API and abstraction layers over the patchwork that is the bank, its core, and many other vendors. All of this results in a complex (and often expensive) banking supply chain involving a user, fintech, BaaS middleware provider, bank, core and the Federal Reserve.

At Column, we set out to simplify and fix this. We are a bank and a software company built from the ground up, offering builders and developers technology-forward banking solutions that cut out the hundreds of vendors, middleware providers, and abstraction layers. This means a safer, more transparent, and less costly banking supply chain. Come build with us!

The opportunity

As part of Column’s Third Party Compliance team, your mandate is to drive the execution of the Bank’s Partner oversight and monitoring program. The regulatory landscape for fintech-banking partnerships is evolving daily, and there is no one-size-fits-all roadmap for partner oversight. Column is committed to executing a best-in-class program - as a result, this role requires a deep understanding of regulatory expectations, and a unique ability to manage risk while executing a methodical and scalable approach to partner oversight.  Implementing a rigorous Third-Party Compliance program is critical to the success of Column’s business model, and this team is responsible for strong ongoing management of the Bank’s partnership business.

This position will report to the Bank’s Head of Regulatory Compliance. Preference for this role to be based in-person in our Presidio-based office in San Francisco 3-4 days per week; will also consider remote with frequent travel.

What you’ll do

• Execute the Bank’s Third-Party Compliance monitoring program to provide effective ongoing oversight of a portfolio of Column’s fintech partners. This includes establishing risk and compliance requirements, conducting testing, engaging regularly with partner stakeholders, monitoring new product development and strategic growth, and developing a deep understanding of the risks inherent in each partnership to ensure your partner-specific oversight plan effectively manages those risks.

• Create effective and efficient methods for the execution of ongoing monitoring activities. This includes the identification of streamlined ways to receive timely reporting, metrics, and required deliverables from each partner.

• Identify trends, outliers, and/or key risk indicators as part of monitoring activities.

• Manage risk and compliance components of marketing reviews, product reviews, use case expansion for existing partners.

• Stay closely engaged with industry and regulators relative to third-party risk best practices and key areas of risk and regulatory focus

• Provide periodic reporting on key risk indicators and risk appetite metrics to Management

• Partner closely with the business, finance, other risk leads, legal, compliance, and regulatory affairs to drive execution of the Bank’s overarching Third-Party Risk Management Framework

What you’ll need to be successful

• 5+ years of experience in dedicated risk management roles, with a specific focus on operational risk, regulatory compliance, and/or third-party risk management

• Familiarity with the fintech-banking partnership model, and key risks and risk mitigation strategies relevant to the partnership model

• Demonstrated project management skills and the ability to juggle execution across multiple partners/stakeholders

• Meaningful experience with/exposure to enterprise risk management programs and additional risk stripes, including BSA/AML, information security, financial and capital risk, and/or operational risk

• Familiarity with commercial banking products, relevant compliance requirements, and product-specific risks (e.g., lending, deposits, cross-border payments, etc.)

• Fluency with key regulations, including those addressing Fair Lending, Privacy, Funds Availability, Truth in Lending, Electronic Funds Transfers, NACHA, E-Sign, UDAAP, and Prepaid Access, among others

• Ability to clearly articulate and communicate requirements, expectations, observations, and identified risks with stakeholders

• Excitement about working in a fast-paced, deeply cross-functional space