Technology Risk - Global Cyber Defense & Intel - Cyber Risk & Regulatory Response - Associate

Goldman Sachs • Dallas, TX

203d

About The Position

Led by the Chief Information Security Officer (CISO), Technology Risk secures Goldman Sachs against hackers and other cyber threats. We are responsible for detecting and preventing attempted cyber intrusions against the firm, helping the firm develop more secure applications and infrastructure, developing software in support of our efforts, measuring cybersecurity risk, and designing and driving implementation of cybersecurity controls. The team has global presence across the Americas, APAC, India and EMEA. Within Technology Risk, the Global Cyber Defense and Intelligence (GCDI) identifies malicious activity, manages the lifecycle of vulnerabilities within GS technologies, and investigates and manages threats across the firm. We are a team of security, software, and product engineers that allow the firm to respond appropriately to firm risks using detection models, security architecture, and cutting-edge cyber threat analysis to manage internal and external threats against the firm.

Requirements

• Bachelor's degree with 3-5+ years of experience in enterprise risk management, internal audit, information security, technology risk, cybersecurity or technical project management.
• Ability to work independently to conduct risk analysis, root cause analysis, solve problems and action plan development.
• Strong analytical, interpersonal, problem solving, influencing, organizational and time management skills with sense of ownership and accountability.
• Strong verbal and written communication skills especially in relation to communicating status, risks and technical concepts in a succinct, direct, and timely manner.
• Demonstrates good judgement and influencing skills across all levels of the organization.
• Ability to develop and maintain good relationships across a global team to help drive change across the organization.

Nice To Haves

• Bachelor's degree preferably in Computer Science, Management Information Systems, Cyber/Information Security or similar.
• Knowledge of governance or risk management methodologies and information security frameworks, such as NIST, ISO and others.
• Knowledge of the cyber security landscape.
• Understanding of Regulatory oversight and external or internal audit processes.
• Knowledge of ServiceNow platform to support issue management and experience in building reports and dashboards for tracking operational metrics.

Responsibilities

• Be part of the Governance & Risk Management team embedded in GCDI.
• Work closely with key stakeholders across Engineering, Operational Risk and Internal Audit.
• Proactively manage the lifecycle of GCDI controls and self-identified issues.
• Coordinate and respond to global regulatory exams.
• Streamline business processes to gain efficiencies.
• Support and track all regulatory and audit requests to completion.
• Facilitate tasks and requests driven from the broader Technology Risk organization.
• Support the maturity of the GCDI Controls Management function.
• Produce timely reporting and communications of regulatory exams, internal and external audit requests and assessments across GCDI.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Securities, Commodity Contracts, and Other Financial Investments and Related Activities
• Education Level: Bachelor's degree