Internal Audit - Dallas - Vice President, Technology Audit - 8923167

Goldman Sachs•Dallas, TX

1d•Onsite

About The Position

Responsible for managing multiple audits concurrently and providing independent assurance of the internal control structure within the firm's technology infrastructure and business systems. Leverage knowledge and experience in technology infrastructure, application development, cybersecurity, systems life cycle development processes, identity and access management, data transfer and monitoring, artificial intelligence (AI) systems, third party risk management, and overall consumer business risk management. Responsibilities include the management and performance of audit plans, including planning, execution and reporting, management of finding remediation, continuous assessment of risk, audit resource management, firm control initiative participation and participation in industry and market forums. Drive discussions with senior technology stakeholders to understand risk drivers, control state, and impact to formulate a point of view of the control environment. Define audit scope, design control testing steps to evaluate the adequacy of the control designs and operating effectiveness. Manage the design and execution of tests to validate identified application system controls, which may require data analysis, code inspection and re-performance of system processes. Analyze the design of controls around the underlying system architecture in the context of information technology controls such as security, availability and performance and their impact on the business. Analyze business and technology processes to evaluate the effectiveness of the relevant technology controls. Validate that system features meet business, technology, and regulatory requirements. Present the scope, progress, and results of the review to internal audit management, technology and business stakeholders. Evaluate management action plans to address control deficiencies. Analyze data by applying various data analysis techniques and data mining to derive conclusions and make business decisions to drive projects. Collaborate with application developers, system architects, engineers, and security practitioners to audit applications and systems.

Requirements

Master’s degree (U.S. or foreign equivalent) in Computer Science, Information Technology, Management Information Systems, or a related field and three (3) years of experience in job offered or a related role OR Bachelor’s degree (U.S. or foreign equivalent) in Computer Science, Information Technology, Management Information Systems, or a related field and five (5) years of experience in job offered or a related role.
Prior experience must include three (3) years of experience (with a Master’s degree) or five (5) years of experience (with a Bachelor’s degree) with the following: utilizing concepts related to information systems, networks, system architecture, design, information security, technology resiliency, risk and control governance and metrics, incident management, SDLC, vulnerability management and data protection
Prior experience must include software development, information and cybersecurity, cloud computing, and development operations
Prior experience must include identifying, assessing and relating technology risks to business risks
Prior experience must include working with data integrity, change management, incident and alert management, entitlement management, data backup and retention, performance and capacity management, technology frameworks, and system monitoring
Prior experience must include using object-oriented programming languages including Java and C++, scripting languages such as Python, and IDE environments such as IntelliJ, Eclipse and NetBeans
Prior experience must include applying analytical and data analysis skills such as SQL or Aqua DB Studio and performing data analytics, data mining and database concepts

Responsibilities

Managing multiple audits concurrently
Providing independent assurance of the internal control structure within the firm's technology infrastructure and business systems
Leveraging knowledge and experience in technology infrastructure, application development, cybersecurity, systems life cycle development processes, identity and access management, data transfer and monitoring, artificial intelligence (AI) systems, third party risk management, and overall consumer business risk management
Management and performance of audit plans, including planning, execution and reporting
Management of finding remediation
Continuous assessment of risk
Audit resource management
Firm control initiative participation
Participation in industry and market forums
Driving discussions with senior technology stakeholders to understand risk drivers, control state, and impact to formulate a point of view of the control environment
Defining audit scope
Designing control testing steps to evaluate the adequacy of the control designs and operating effectiveness
Managing the design and execution of tests to validate identified application system controls, which may require data analysis, code inspection and re-performance of system processes
Analyzing the design of controls around the underlying system architecture in the context of information technology controls such as security, availability and performance and their impact on the business
Analyzing business and technology processes to evaluate the effectiveness of the relevant technology controls
Validating that system features meet business, technology, and regulatory requirements
Presenting the scope, progress, and results of the review to internal audit management, technology and business stakeholders
Evaluating management action plans to address control deficiencies
Analyzing data by applying various data analysis techniques and data mining to derive conclusions and make business decisions to drive projects
Collaborating with application developers, system architects, engineers, and security practitioners to audit applications and systems