AddressJob Duties: Vice President with Goldman Sachs & Co. LLC in Dallas, Texas. Multiple positions available. Guide strategy and approach for audits covering core engineering. Meet with members of engineering management to understand information technology controls and key technology changes. Lead the risk assessment, scoping and planning of internal audit reviews. Lead the execution of internal audits, specifically focusing on the following: designing and executing tests to validate identified application system controls, which may require data analysis, code inspection and re-performance of system processes; analyzing the design of controls around the underlying system architecture in the context of information technology controls such as security, availability and performance and their impact on business-aligned technology groups; analyzing the business and technology processes to evaluate the effectiveness of the relevant technology controls; validating that system features meet business, technology, and regulatory requirements. validating the quality of internal SOX assessments. Document the results of the test steps executed within the internal audit automated document project repository. Oversee the vetting of audit observations and the tracking, monitoring, and recording remediation of risks identified in reviews. Lead in audit report preparation. Lead in presenting the scope, progress, and results of the review to internal, technology and business stakeholders.
Job Requirements: Bachelor’s degree (U.S. or foreign equivalent) in Computer Science, Information Security, Electrical and Electronic Engineering, Engineering, or equivalent field. Five (5) years of experience in the job offered or in a related role. Prior experience must include five (5) years of experience with: Batch scripting and executing standard commands in Linux and Windows Operating systems; internet infrastructure design and installation and support of network devices and firewalls; Cloud computing concepts, technologies, risks; and mitigating controls; Systems and security administration and configuration of servers and desktops including UNIX, Windows, or directory services; working on cyber security risks related to web, mobile, web services, and client and server architectures; handling encryption schemes (symmetric, asymmetric, and hashing) and how they may be applied in an application architecture; performing vulnerability assessment and penetration testing methodologies and processes for web, thick client, and mobile applications; handling threat modelling, intelligence, and incident response; managing, monitoring, and operating of technology including backups, change management, system monitoring, incident and problem Management; conducting business continuity planning and disaster recovery design and implementation; assessing security within the software development lifecycle; implementing relevant technology standards and regulations including NIST Cyber Security Framework, FFIEC CAT, ISO 27001, GDPR, NYSDFS, data privacy rules, and FFIEC IT handbooks; and working effectively across a large audit team and understanding the team's role in the overall strategy of the firm. Travel required: 10% of the time visiting other GS offices in US.
©The Goldman Sachs Group, Inc., 2024. All rights reserved. Goldman Sachs is an equal employment/affirmative action employer Female/Minority/Disability/Veteran/Sexual Orientation/Gender Identity.
