Internal Audit - Dallas - Associate, Technology Audit - 10252614

Goldman Sachs•Dallas, TX

4d•Onsite

About The Position

The Associate, Technology Audit role at Goldman Sachs & Co. LLC in Dallas, Texas is responsible for providing independent assurance of the internal control structure within the firm's technology infrastructure and business systems. This role leverages knowledge and experience in technology infrastructure, application development, cybersecurity, electronic trading, risk management, and anti-financial crime systems. Responsibilities include managing and performing audit plans, including planning, execution, and reporting, regulatory interaction, managing finding remediation, continuous risk assessment, audit resource management, firm control initiative participation, and participation in industry and market forums. The role involves driving discussions with senior technology stakeholders to understand risk drivers, control state, and impact to formulate a point of view of the control environment. It also includes defining audit scope, designing control testing steps to evaluate the adequacy of control designs and operating effectiveness, and designing and executing tests to validate identified application system controls, which may require data analysis, code inspection, and re-performance of system processes. The Associate will analyze the design of controls around the underlying system architecture in the context of information technology controls such as security, availability, and performance, and their impact on the business. They will also analyze business and technology processes to evaluate the effectiveness of relevant technology controls, validate that system features meet business, technology, and regulatory requirements, and present the scope, progress, and results of the review to internal audit management, technology, and business stakeholders. Additionally, the role involves evaluating management action plans to address control deficiencies and analyzing data using various data analysis techniques and data mining to derive conclusions and make business decisions to drive projects. Collaboration with application developers, system architects, engineers, and security practitioners is key for auditing applications and systems.

Requirements

Master’s degree (U.S. or equivalent) in Computer Science, Computer or Electronics Engineering, Information Systems, Cybersecurity or a related computational and analytical field, and one (1) year of experience in the job offered or in a related role OR Bachelor’s degree (U.S. or equivalent) in Computer Science, Computer or Electronics Engineering, Information Systems, Cybersecurity or a related computational and analytical field, and three (3) years of experience in the job offered or in a related role.
Prior experience must include one (1) year of experience (with a Master’s degree) or three (3) years of experience (with a Bachelor’s degree) with utilizing concepts related to information systems, networks, system architecture, design, information security, technology resiliency, risk and control governance and metrics, incident management, SDLC, vulnerability management and data protection.
Prior experience must include one (1) year of experience (with a Master’s degree) or three (3) years of experience (with a Bachelor’s degree) with software development, information and cybersecurity, cloud computing, and development operations.
Prior experience must include one (1) year of experience (with a Master’s degree) or three (3) years of experience (with a Bachelor’s degree) with identifying, assessing and relating technology risks to business risks.
Prior experience must include one (1) year of experience (with a Master’s degree) or three (3) years of experience (with a Bachelor’s degree) with working with data integrity, change management, incident and alert management, entitlement management, data backup and retention, performance and capacity management, technology frameworks, and system monitoring.
Prior experience must include one (1) year of experience (with a Master’s degree) or three (3) years of experience (with a Bachelor’s degree) with interpreting object-oriented programming languages including Java and C++, scripting languages such as Python, and IDE environments such as IntelliJ, Eclipse and NetBeans.
Prior experience must include one (1) year of experience (with a Master’s degree) or three (3) years of experience (with a Bachelor’s degree) with applying analytical and data analysis skills such as SQL or Tableau and performing data analytics, data mining and database concepts.

Responsibilities

Providing independent assurance of the internal control structure within the firm's technology infrastructure and business systems.
Leveraging knowledge and experience in technology infrastructure, application development, cybersecurity, electronic trading, risk management and anti-financial crime systems.
Management and performance of audit plans, including planning, execution and reporting.
Regulatory interaction.
Management of finding remediation.
Continuous assessment of risk.
Audit resource management.
Firm control initiative participation.
Participation in industry and market forums.
Driving discussions with senior technology stakeholders to understand risk drivers, control state, and impact to formulate a point of view of the control environment.
Defining audit scope.
Designing control testing steps to evaluate the adequacy of the control designs and operating effectiveness.
Designing and executing tests to validate identified application system controls, which may require data analysis, code inspection and re-performance of system processes.
Analyzing the design of controls around the underlying system architecture in the context of information technology controls such as security, availability and performance and their impact on the business.
Analyzing business and technology processes to evaluate the effectiveness of the relevant technology controls.
Validating that system features meet business, technology, and regulatory requirements.
Presenting the scope, progress, and results of the review to internal audit management, technology and business stakeholders.
Evaluating management action plans to address control deficiencies.
Analyzing data by applying various data analysis techniques and data mining to derive conclusions and make business decisions to drive projects.
Collaborating with application developers, system architects, engineers, and security practitioners to audit applications and systems.