Internal Audit - Dallas - Vice President, Technology Audit - 4689594

Goldman Sachs•Dallas, TX

1d•Onsite

About The Position

Goldman Sachs & Co. LLC in Dallas, Texas is seeking a Vice President, Technology Audit. This role is responsible for managing multiple audits concurrently and providing independent assurance of the internal control structure within the firm's technology infrastructure and business systems. The position requires leveraging knowledge and experience in technology infrastructure, application development, cybersecurity, electronic trading, risk management, and anti-financial crime systems. The Vice President will drive discussions with senior technology stakeholders to understand risk drivers, control state, and impact, formulating a point of view on the control environment. Key responsibilities include defining audit scope, designing control testing steps to evaluate the adequacy of control designs and operating effectiveness, and managing the design and execution of tests to validate identified application system controls. This may involve data analysis, code inspection, and re-performance of system processes. The role also involves analyzing the design of controls around system architecture in the context of information technology controls (security, availability, performance) and their business impact, as well as evaluating the effectiveness of relevant technology controls by analyzing business and technology processes. Validation that system features meet business, technology, and regulatory requirements, and evaluation of management action plans for control deficiencies are also key. The position requires analyzing data using various data analysis techniques and data mining to derive conclusions and make business decisions. Collaboration with application developers, system architects, engineers, and security practitioners is essential for auditing applications and systems.

Requirements

Master’s degree (U.S. or foreign equivalent) in Computer Science, Computer or Electronics Engineering, Business Analytics, Information Systems, or a related field, and three (3) years of experience in the job offered or in a related role OR Bachelor’s degree (U.S. or foreign equivalent) in Computer Science, Computer or Electronics Engineering, Business Analytics, Information Systems, or a related field, and five (5) years of experience in the job offered or in a related role.
Prior work experience must include three (3) years (with a Master’s degree) OR five (5) years (with a Bachelor’s degree) with object oriented programming languages such as Java or C++, or a scripting language such as Python
Prior work experience must include three (3) years (with a Master’s degree) OR five (5) years (with a Bachelor’s degree) with applying analytical and data analysis skills using SQL, Aqua DB Studio, or similar tools
Prior work experience must include three (3) years (with a Master’s degree) OR five (5) years (with a Bachelor’s degree) with applying data analytics, data mining, and database concepts to structure and analyze large datasets
Prior work experience must include three (3) years (with a Master’s degree) OR five (5) years (with a Bachelor’s degree) with developing scripts to facilitate validation of complex test objectives
Prior work experience must include three (3) years (with a Master’s degree) OR five (5) years (with a Bachelor’s degree) with collaborating with business and technology within and across global teams on multi-region projects to accomplish common goals and articulating objectives or ideas persuasively to build mutually supportive relationships
Prior work experience must include three (3) years (with a Master’s degree) OR five (5) years (with a Bachelor’s degree) with assessing business and technology risks and applying ability to identify and relate technology risk to business risks in integrated audits / projects
Prior work experience must include three (3) years (with a Master’s degree) OR five (5) years (with a Bachelor’s degree) with utilizing concepts related to information systems, networks, system architecture, design, information security, technology resiliency, risk and control governance and metrics, incident management, SDLC, vulnerability management, and data protection in audits / projects
Prior work experience must include three (3) years (with a Master’s degree) OR five (5) years (with a Bachelor’s degree) with collaborating with partners between first and second lines-of-defense to inform risk evaluation of compliance program elements such as KYC, BSA/AML and Sanctions

Responsibilities

Managing multiple audits concurrently
Providing independent assurance of the internal control structure within the firm's technology infrastructure and business systems
Leveraging knowledge and experience in technology infrastructure, application development, cybersecurity, electronic trading, risk management and anti-financial crime systems
Driving discussions with senior technology stakeholders to understand risk drivers, control state, and impact to formulate a point of view of the control environment
Defining audit scope
Designing control testing steps to evaluate the adequacy of the control designs and operating effectiveness
Managing the design and execution of tests to validate identified application system controls, which may require data analysis, code inspection and re-performance of system processes
Analyzing the design of controls around the underlying system architecture in the context of information technology controls such as security, availability and performance and their impact on the business
Analyzing business and technology processes to evaluate the effectiveness of the relevant technology controls
Validating that system features meet business, technology, and regulatory requirements
Evaluating management action plans to address control deficiencies
Analyzing data by applying various data analysis techniques and data mining to derive conclusions and make business decisions to drive projects
Collaborating with application developers, system architects, engineers, and security practitioners to audit applications and systems