Internal Audit - New York - Associate, Technology Audit - 9797390

Goldman Sachs•New York, NY

11h•Onsite

About The Position

Analyze the design of controls around the underlying system architecture in the context of information technology controls such as security, availability and performance and their impact on the business. Design and execute tests to validate identified application system controls, which may require data analysis, code inspection and re-performance of system processes. Define and present the scope, progress, and results of the review to audit management, technology, and business stakeholders. Analyze the design and effectiveness of technology controls around the firmwide data governance framework that relates to creating, maintaining, and lineaging data. Utilize sampling techniques to determine groups to be audited or use complete enumeration methods. Collaborate with application developers, system architects, engineers, and security practitioners to validate that system features meet business, technology, and regulatory requirements. Document audit testing and results as well as findings and recommendations in a clear and concise manner. Identify risks associated with Technology implementations, Technology governance, privilege management, change management, including Software Development Lifecycle, and data completeness and integrity controls. Review, analyze, and validate large sets of data by applying various data analytics techniques to confirm completeness and accuracy for regulatory reporting. Provide independent assurance of the internal control structure within the firm's technology infrastructure and business systems. Coordinate with business auditors as well as global audit team on multi-region integrated audits to assess business process and systems for mitigating financial, regulatory, and reputational risk within Controllers and Tax. Write new scripts in programming languages to conduct review of data quality controls for effectiveness testing. Create graphs, charts, or other visualizations to convey the results of data analysis. Evaluate management action plans to address control deficiencies.

Requirements

Master’s degree (U.S. or foreign equivalent) in Computer Science, Computer or Electronics Engineering, Information Systems, Analytics, or a related field and one (1) year of experience in the job offered or a related role.
Bachelor’s degree (U.S. or foreign equivalent) in Computer Science, Computer or Electronics Engineering, Information Systems, Analytics, or a related field and three (3) years of experience in the job offered or a related role.
Prior experience must include one (1) year of experience (with a Master’s degree) or three (3) years of experience (with a Bachelor’s degree) with: utilizing risk analysis, regarding assessing the probability and impact of implementation defects; assessing business and technology risks and identifying and relating technology risk to business risks; assessing complex and large environment, including applications, system interfaces and infrastructure, and data processing, as well as utilizing multiple IT processes, such as data integrity, change management, entitlement management, data backup and retention, performance and capacity management, technology system monitoring; utilizing concepts related to information systems, networks, system architecture, design, information security, technology resiliency, incident management, SDLC (software development life cycle), and data protection; object oriented programming languages such as Java, C++, scripting languages such as Python, and IDE environments such as Visual Studio, Jupyter Notebook, IntelliJ, Eclipse, and NetBeans; applying analytical and data analysis skills such as SQL, AWS Redshift, Azure Databricks, or similar tools, and using data analytics, data mining and database concepts and developing scripts to facilitate in resolving project-related issues; and utilizing project management tools such as JIRA, Kanban or Confluence, and resolving conflicts in a manner that allows projects to progress with minimal delay.

Responsibilities

Analyze the design of controls around the underlying system architecture in the context of information technology controls such as security, availability and performance and their impact on the business.
Design and execute tests to validate identified application system controls, which may require data analysis, code inspection and re-performance of system processes.
Define and present the scope, progress, and results of the review to audit management, technology, and business stakeholders.
Analyze the design and effectiveness of technology controls around the firmwide data governance framework that relates to creating, maintaining, and lineaging data.
Utilize sampling techniques to determine groups to be audited or use complete enumeration methods.
Collaborate with application developers, system architects, engineers, and security practitioners to validate that system features meet business, technology, and regulatory requirements.
Document audit testing and results as well as findings and recommendations in a clear and concise manner.
Identify risks associated with Technology implementations, Technology governance, privilege management, change management, including Software Development Lifecycle, and data completeness and integrity controls.
Review, analyze, and validate large sets of data by applying various data analytics techniques to confirm completeness and accuracy for regulatory reporting.
Provide independent assurance of the internal control structure within the firm's technology infrastructure and business systems.
Coordinate with business auditors as well as global audit team on multi-region integrated audits to assess business process and systems for mitigating financial, regulatory, and reputational risk within Controllers and Tax.
Write new scripts in programming languages to conduct review of data quality controls for effectiveness testing.
Create graphs, charts, or other visualizations to convey the results of data analysis.
Evaluate management action plans to address control deficiencies.