Internal Audit, Technology Auditor-Investment Banking, Associate

Goldman Sachs•Dallas, TX

About The Position

In Internal Audit, we ensure that Goldman Sachs maintains effective controls by assessing the reliability of financial reports, monitoring the firm’s compliance with laws and regulations, and advising management on developing smart control solutions. Our group has unique insight on the financial industry and its products and operations. We’re looking for detail-oriented team players who have an interest in financial markets and want to gain insight into the firm’s operations and control processes. Goldman Sachs Internal Audit comprises individuals from diverse backgrounds including chartered accountants, developers, risk management professionals, cybersecurity professionals, and data scientists. We are organized into global teams comprising business and technology auditors to cover all the firm’s businesses and functions, including securities, investment banking, consumer and investment management, risk management, finance, cyber-security and technology risk, and engineering.

Requirements

3-8 years of experience as a technology auditor, leading audits covering IT application and general controls
Understanding of software development and system architecture
High level understanding of databases, operating systems and messaging
Proficiency in Excel and SQL
Strong written and verbal communication skills
Site reliability engineering and runtime operational tools (agent based technologies) and processes (change and incident management, job/batch management)
Cloud computing (Private, AWS, Google, Azure, Docker)
Linux and Windows operating systems: security, configuration, and management
Database design, setup and administration (DBA) experience with Sybase, Oracle, or UDB
Big data systems: Hadoop, Snowflake, NoSQL, Hbase, HDFS, MapReduce
Web infrastructure technologies, security and design
Systems development/SDLC tools and processes (SVN/CVS, build, software testing, configuration and deployment)
Email, messaging and collaboration systems (Exchange, Sharepoint, instant messaging)
Business Continuity Planning and Disaster Recovery design and implementation
Relevant technology standards and regulations – ISO 27001, FFIEC IT handbooks, COBIT, ITIL, NIST, and FedRAMP
Ability to review code (Java, C#, C++, Python, VBA macros etc.)

Nice To Haves

Data and Log Analysis (using SQL and Splunk) and visualization (using Spotfire, Tableau, QlikView or other) would be useful but not required
Experience with Data Analytics tools and techniques
Relevant certification or industry accreditation (e.g., CISA, CISSP, CISM, CFA, FRM, etc.)

Responsibilities

Communicates and reports on the effectiveness of the firm’s governance, risk management and controls that mitigate current and evolving risk
Raise awareness of control risk
Assesses the firm’s control culture and conduct risks
Monitors management’s implementation of control measures
Play a vital role in the scoping and planning of the audits, deploy audit and analytical procedures and techniques to assess the design and operating effectiveness of the controls to mitigate the risks, and discuss the results with the firm’s local and global management.
Monitor and follow up with management on the resolution of open audit findings.