Internal Audit - Salt Lake City - Associate, Technology Audit - 4670809

Goldman Sachs•Salt Lake City, UT

7d•Onsite

About The Position

This role is responsible for providing independent assurance of the internal control structure within the firm's technology infrastructure and business systems. The Associate, Technology Audit will leverage knowledge and experience in technology infrastructure, application development, cybersecurity, electronic trading, risk management, and anti-financial crime systems. Responsibilities include the management and performance of audit plans, including planning, execution and reporting, regulatory interaction, management of finding remediation, continuous assessment of risk, audit resource management, firm control initiative participation, and participation in industry and market forums. The role involves driving discussions with senior technology stakeholders to understand risk drivers, control state, and impact to formulate a point of view of the control environment. It also includes defining audit scope, designing control testing steps to evaluate the adequacy of control designs and operating effectiveness, and designing and executing tests to validate identified application system controls, which may require data analysis, code inspection, and re-performance of system processes. The Associate will analyze the design of controls around the underlying system architecture in the context of information technology controls such as security, availability, and performance, and their impact on the business. They will also analyze business and technology processes to evaluate the effectiveness of relevant technology controls and validate that system features meet business, technology, and regulatory requirements. Additionally, the role involves assisting in presenting the scope, progress, and results of the review to internal audit management, technology, and business stakeholders, and evaluating management action plans to address control deficiencies. The Associate will analyze data by applying various data analysis techniques and data mining to derive conclusions and make business decisions to drive projects. Collaboration with application developers, system architects, engineers, and security practitioners is key for auditing applications and systems.

Requirements

Master’s degree (U.S. or foreign equivalent) in Computer Science, Operations Research, Data Analytics, Industrial Engineering, Information Systems or a related field, and one (1) year of experience in the job offered or in a related technology audit role OR Bachelor’s degree (U.S. or foreign equivalent) in Computer Science, Operations Research, Data Analytics, Industrial Engineering, Information Systems or a related field, and three (3) years of experience in the job offered or in a related technology audit role.
One (1) year of experience (with Master’s degree) or three (3) years of experience (with Bachelor’s degree) with applying analytical and data analysis skills such as SQL or Aqua DB Studio and performing data analytics, data mining and database concepts.
One (1) year of experience (with Master’s degree) or three (3) years of experience (with Bachelor’s degree) with using object-oriented programming languages including Java and C++, scripting languages such as Python, and IDE environments such as IntelliJ, Eclipse and NetBeans.
One (1) year of experience (with Master’s degree) or three (3) years of experience (with Bachelor’s degree) with utilizing concepts related to information systems, networks, system architecture, design, information security, technology resiliency, risk and control governance and metrics, incident management, SDLC, vulnerability management and data protection in audits.
One (1) year of experience (with Master’s degree) or three (3) years of experience (with Bachelor’s degree) with working with multiple IT controls, including data integrity, exception-based controls, change management, entitlement management, data backup and retention, performance and capacity management, technology SOX, and system monitoring.
One (1) year of experience (with Master’s degree) or three (3) years of experience (with Bachelor’s degree) with identifying, assessing and relating technology risks to business risks in integrated audits to determine financial, regulatory or reputational impact to business.

Responsibilities

Providing independent assurance of the internal control structure within the firm's technology infrastructure and business systems.
Leveraging knowledge and experience in technology infrastructure, application development, cybersecurity, electronic trading, risk management and anti-financial crime systems.
Management and performance of audit plans, including planning, execution and reporting.
Regulatory interaction.
Management of finding remediation.
Continuous assessment of risk.
Audit resource management.
Firm control initiative participation.
Participation in industry and market forums.
Driving discussions with senior technology stakeholders to understand risk drivers, control state, and impact to formulate a point of view of the control environment.
Defining audit scope.
Designing control testing steps to evaluate the adequacy of the control designs and operating effectiveness.
Designing and executing tests to validate identified application system controls, which may require data analysis, code inspection and re-performance of system processes.
Analyzing the design of controls around the underlying system architecture in the context of information technology controls such as security, availability and performance and their impact on the business.
Analyzing business and technology processes to evaluate the effectiveness of the relevant technology controls.
Validating that system features meet business, technology, and regulatory requirements.
Presenting the scope, progress, and results of the review to internal audit management, technology and business stakeholders.
Evaluating management action plans to address control deficiencies.
Analyzing data by applying various data analysis techniques and data mining to derive conclusions and make business decisions to drive projects.
Collaborating with application developers, system architects, engineers, and security practitioners to audit applications and systems.