Let's begin! Associate Software Engineer

Moody's•Charlotte, NC

About The Position

The Associate Software Engineer supports IT risk management, technical controls, and operational governance across Moody’s lines of business. The role combines hands-on technical analysis with risk assessment and documentation, helping teams assess technology risks, maintain control documentation, evaluate processes against Moody’s ICT Risk Management Standard, and support technology audits. The position also uses approved AI tools and lightweight automation to improve documentation, evidence collection, inventory accuracy, and control monitoring, while ensuring sensitive information is protected and important risk and control decisions remain subject to authorized human review. The role works across technology groups, lines of business, control owners, second-line risk management, and audit functions. It contributes to Moody’s operational resilience and governance objectives in a collaborative, innovation-forward environment.

Requirements

3–6 years of experience in technology risk, IT controls, technical audit support, software engineering, infrastructure engineering, cybersecurity governance, or a closely related discipline.
Experience drafting risk assessments, evaluating inherent and residual risk, documenting control design and operating effectiveness, and presenting evidence-based assessments for second-line review and challenge.
Strong working knowledge of ICT Risk Management standards and the ability to translate requirements into practical controls, documented procedures, and evidence expectations across lines of business.
Ability to understand application architecture, cloud and infrastructure services, identity and access management, software development lifecycles, change management, logging and monitoring, vulnerability management, and technology resilience.
Practical experience using a scripting language such as Python or PowerShell, SQL, APIs, and version control to analyze evidence, validate control execution, or automate repeatable documentation and monitoring activities.
Demonstrated ability to produce clear, accurate standard operating procedures, control narratives, process flows, technical assessments, and audit-ready evidence packages.
Ability to explain technical risks to technical and nontechnical audiences, constructively defend assessments, resolve review comments, and escalate unresolved issues through established governance channels.
Demonstrated proficiency in artificial intelligence concepts, with hands-on experience using AI tools to streamline workflows and enhance operational efficiency.
Proven ability to implement AI-powered solutions to solve business challenges.
Growing awareness of AI risk management and commitment to responsible and ethical AI use.
Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related discipline, or equivalent practical experience.

Nice To Haves

Experience with governance, risk, and compliance platforms, workflow tools, and document repositories.
Relevant technology, cloud, cybersecurity, or risk certifications.

Responsibilities

Draft, update, and maintain Risk and Control Self-Assessments for technology processes and services, including risk statements, inherent and residual risk assessments, control mappings, supporting rationale, and identified gaps.
Present and defend assessments during second-line risk review and challenge using traceable technical evidence; document challenge outcomes, resolve comments, and escalate material disagreements through established governance channels.
Write, update, and maintain technical standard operating procedures and a governed inventory, including ownership, version history, approval status, review dates, and links to applicable risks and controls.
Translate technical workflows into clear, executable procedures with defined responsibilities, evidence requirements, exception handling, and escalation paths.
Assess lines of business processes and technical practices against the ICT Risk Management Standard, identifying gaps, inconsistencies, and opportunities to strengthen control implementation.
Support internal and external technology audits by preparing technical documentation, coordinating evidence requests, and participating in system and control walkthroughs.
Use approved AI tools to draft and revise assessments, standard operating procedures, control narratives, technical summaries, and audit responses while retaining accountability for accuracy and completeness.
Build or maintain lightweight scripts and automated workflows that improve inventory accuracy, evidence collection, documentation quality, and control monitoring.
Validate AI-generated outputs, protect sensitive information, and ensure risk decisions, control approvals, exceptions, and enforcement actions remain subject to authorized human review.