Associate - 7055299

Job Description

Job Duties: Associate with Goldman Sachs & Co. LLC in Richardson, Texas. Build the technical risk profile of the business units and work with stakeholders to create a plan towards reducing risk exposure in an agile, collaborative and well socialized manner. Assist risk assessments to identify gaps in compliance to information security and BCP standards and policies, for both internal technology solutions as well as solutions provided by third-party service providers. Provide advice to business and technology users on: (i) understanding relevant technology risk policies and standards; (ii) principles of security and controls as defined by the firm's risk and control framework; and (iii) adoption of secure and resilient solutions. Develop, maintain, and improve technology risk programs reflecting new emerging risks. Contributing to global, regional and local technology risk initiatives aimed at improving our baseline on information protection, resiliency and controls of technology processes and services. Build and provide requirements for automated solutions for security task that are performed manually. Design and implement proof of concept exercises for potential security solutions. Assist in the response to security incidents as needed. Review the information security posture for the IT infrastructure and applications and work towards improving that posture by understanding risks to the business and following up on priorities and evolving threat landscape. Document, share, and enforce best practices for all cloud technologies. Collaborate with technical teams on major initiatives to ensure security exists at the outset of a design or project. Perform architecture reviews and develop threat models for cloud infrastructure.

Job Requirements: Master's degree (U.S. or foreign equivalent) in Information Systems, Information Technology, Information, Network or Computer Security, Computer Science, Computer Engineering, Electrical Engineering, or a related field and three (3) years of experience in the job offered or a related position or Bachelor's degree (U.S. or foreign equivalent) in Information Systems, Information Technology, Information, Network or Computer Security, Computer Science, Computer Engineering, Electrical Engineering, or a related field and five (5) years of experience in the job offered or a related position. Must have three (3) years of prior work experience with a Master's degree or five (5) years of prior work experience with a Bachelor's degree with: providing analysis of internal and external processes and integrations to understand associated risks; experience in one or more of the following areas: Information Security, Technology Governance, Operational Risk, Technology Audit, Technology Infrastructure or Application Development; Technology Risk Management and Security Controls; working with various regulatory and compliance frameworks; assessing and evaluating corporate risk tolerance into goals and new processes including software engineering, IT teams, and other relevant stakeholders; working with relevant audit and control standards and driving and maintaining the compliance initiative across the organization; and risk management methodologies such as, but not limited to, NIST and ISO.

©The Goldman Sachs Group, Inc., 2023. All rights reserved. Goldman Sachs is an equal employment/affirmative action employer Female/Minority/Disability/Veteran/Sexual Orientation/Gender Identity.