Technology Risk - Global Cyber Defense & Intel - Cyber Risk & Regulatory Response - Associate

WHO WE ARE

Led by the Chief Information Security Officer (CISO), Technology Risk secures Goldman Sachs against hackers and other cyber threats. We are responsible for detecting and preventing attempted cyber intrusions against the firm, helping the firm develop more secure applications and infrastructure, developing software in support of our efforts, measuring cybersecurity risk, and designing and driving implementation of cybersecurity controls. The team has global presence across the Americas, APAC, India and EMEA.

Within Technology Risk, the Global Cyber Defense and Intelligence (GCDI) identifies malicious activity, manages the lifecycle of vulnerabilities within GS technologies, and investigates and manages threats across the firm. We are a team of security, software, and product engineers that allow the firm to respond appropriately to firm risks using detection models, security architecture, and cutting-edge cyber threat analysis to manage internal and external threats against the firm.

YOUR IMPACT

In this position you will be part of the Governance & Risk Management team embedded in GCDI, working closely with key stakeholders across Engineering, Operational Risk and Internal Audit to proactively manage the lifecycle of GCDI controls and self-identified issues, and be responsible for coordinating and responding to global regulatory exams.

HOW YOU WILL FULFILL YOUR POTENTIAL

Your responsibilities within the GCDI team will enable cross-pillar collaboration by streamlining business processes to gain efficiencies, support and track all regulatory and audit requests to completion, facilitate tasks and requests driven from the broader Technology Risk organization and support the maturity of the GCDI Controls Management function. This role will also produce timely reporting and communications of regulatory exams, internal and external audit requests and assessments across GCDI.

Basic Qualifications

• Bachelor's degree with 3-5+ years of experience in enterprise risk management, internal audit, information security, technology risk, cybersecurity or technical project management
• Ability to work independently to conduct risk analysis, root cause analysis, solve problems and action plan development
• Strong analytical, interpersonal, problem solving, influencing, organizational and time management skills with sense of ownership and accountability
• Strong verbal and written communication skills especially in relation to communicating status, risks and technical concepts in a succinct, direct, and timely manner
• Demonstrates good judgement and influencing skills across all levels of the organization and the ability to develop and maintain good relationships across a global team to help drive change across the organization

Preferred Qualifications

• Bachelor's degree preferably in Computer Science, Management Information Systems, Cyber/Information Security or similar
• Knowledge of governance or risk management methodologies and information security frameworks, such as NIST, ISO and others
• Knowledge of the cyber security landscape
• Understanding of Regulatory oversight and external or internal audit processes
• Knowledge of ServiceNow platform to support issue management and experience in building reports and dashboards for tracking operational metrics