Asset & Wealth Management -Security Engineer - New York - Analyst

What We Do

At Goldman Sachs, our Engineers don't just make things - we make things possible. Change the world by connecting people and capital with ideas. Solve the most challenging and pressing engineering problems for our clients. Join our engineering teams that build massively scalable software and systems, architect low latency infrastructure solutions, proactively guard against cyber threats, and leverage machine learning alongside financial engineering to continuously turn data into action. Create new businesses, transform finance, and explore a world of opportunity at the speed of markets.

Engineering, which is comprised of our Technology Division and global strategists groups, is at the critical center of our business, and our dynamic environment requires innovative strategic thinking and immediate, real solutions. Want to push the limit of digital possibilities? Start here.

Who We Look For

Goldman Sachs Engineers are innovators and problem-solvers, building solutions in risk management, big data, mobile and more. We look for creative collaborators who evolve, adapt to change and thrive in a fast-paced global environment.

RESPONSIBILITIES AND QUALIFICATIONS

The Goldman Sachs Asset & Wealth Management Division (AWM) provides asset management, wealth management, and banking expertise to institutions worldwide. AWM partners with various teams across the firm to help individuals and institutions navigate changing markets and take control of their financial health.

The AWM Technology Risk function is an information security group embedded within AWM responsible for the oversight of Information Security and Cybersecurity risks across AWM business and technology and supplements the firm's Technology Risk programs to meet the additional unique needs of the AWM business. Our mission is to enable the business needs while balancing controls. The AWM Technology Group is responsible for the following services:

• Governance - Ensure that our risk posture remains in a managed state and helping to meet the different information security, privacy, regulatory, audit, and firm-wide tech risk commitments.
• Client Due Diligence - This client-facing service is a revenue protection function supporting due diligence requests from existing clients and prospects.
• Application Security & Advisory - Operate as the cybersecurity SPOC (single point of contact) for key AWM initiatives.

HOW YOU WILL FULFILL YOUR POTENTIAL

• Provide Governance around technology, data, and risk.
• Build the overall risk profile of the division and work with stakeholders to create a plan towards reducing risk exposure in an agile, collaborative, and well socialized manner
• Provide advice to business & technology users on (1) understanding of relevant Technology Risk policies and standards and (2) principles of security & controls as defined by the firm's Technology Risk and Control Framework, and (3) adoption of secure and resilient solutions
• Maintain a thorough understanding of global, regional and local regulatory requirements that have technology impact
• Perform risk assessments to identify gaps in compliance to information security (application and infrastructure) & vulnerability standards and policies, for both internal technology solutions as well as solutions provided by third-party service providers
• Contribute to global, regional and local Technology Risk initiatives aimed at improving our baseline on information protection, resiliency and controls of technology processes and services
• Provide clear and concise verbal and written recommendations and guidance to both business and technology staff on matters of Technology Risk Management, and Security Incidents
• Develop, maintain, and improve Technology Risk Program reflecting new emerging risks
• Promote and assist in the training & awareness of information security and BCP within the region
• Maintain the vulnerability management and incident response program by providing analysis and treatment for automated scans
• Coordinate with stakeholders to manage and execute incident response
• Perform perimeter scanning, and analysis for our CDNs and other edge protection related controls
• Strong desire to grow in the Information Security area

SKILLS AND EXPERIENCE WE ARE LOOKING FOR

• 1-3 years of technology experience in one or more of the following areas: Information Security, Technology Governance, Operational Risk, Technology Audit, Technology Infrastructure or Application Development
• Strong program and project management skills and technology expertise
• Ability to analyze internal and external processes and integration to understand risk
• Ability to assess and evaluate corporate risk tolerance and translate into goals and new processes including software engineering, IT teams, and other relevant stakeholders
• Understanding of relevant audit and control standards and the ability to drive and maintain the compliance initiative across the organization
• Experience collaborating with a team of security experts in a diverse set of security topics including, but not limited to, security architecture, financial controls and regulatory compliance, identity and access management, penetration testing, data loss prevention, network security, security monitoring, white box testing/static code analysis, and building secure systems

ABOUT GOLDMAN SACHS

At Goldman Sachs, we commit our people, capital and ideas to help our clients, shareholders and the communities we serve to grow. Founded in 1869, we are a leading global investment banking, securities and investment management firm. Headquartered in New York, we maintain offices around the world. We believe who you are makes you better at what you do. We're committed to fostering and advancing diversity and inclusion in our own workplace and beyond by ensuring every individual within our firm has a number of opportunities to grow professionally and personally, from our training and development opportunities and firmwide networks to benefits, wellness and personal finance offerings and mindfulness programs. Learn more about our culture, benefits, and people at GS.com/careers.

We're committed to finding reasonable accommodations for candidates with special needs or disabilities during our recruiting process. Learn more: https://www.goldmansachs.com/careers/footer/disability-statement.html©

The Goldman Sachs Group, Inc., 2023. All rights reserved.

Goldman Sachs is an equal employment/affirmative action employer Female/Minority/Disability/Veteran/Sexual Orientation/Gender Identity

Salary Range
The expected base salary for this New York, New York, United States-based position is $110000-$130000. In addition, you may be eligible for a discretionary bonus if you are an active employee as of fiscal year-end.

Benefits
Goldman Sachs is committed to providing our people with valuable and competitive benefits and wellness offerings, as it is a core part of providing a strong overall employee experience. A summary of these offerings, which are generally available to active, non-temporary, full-time and part-time US employees who work at least 20 hours per week, can be found here.