Engineering, Tech Risk Officer, Associate, Singapore- Singapore-Goldman Sachs Services Pvt Ltd-[...]

Goldman Sachs Services Pvt Ltd; Singapore; On-site; SGD 90,000 - 120,000; Full time

Job summary

A leading company is looking for a Technology Risk Officer to manage and communicate technology risks in its SDLC & Runtime division. This role involves driving controls adoption, collaborating with engineering teams, and managing IT risk improvement projects. The successful candidate will hold a Bachelor's degree in Computer Science and have substantial experience in IT Risk Management, along with a solid grasp of security policies and stakeholder management.

Qualifications

• 3 years experience in driving controls adoption and IT Risk projects.
• Ability to manage diverse IT stakeholders.
• Strong knowledge of technology platforms.

Responsibilities

• Review and approve business continuity plans for critical systems.
• Communicate technology risks and mitigation strategies to stakeholders.
• Drive adoption of security controls in the SDLC processes.

Skills

Information Security Policies

IT Risk Management

Stakeholder Management

Program Management

Technical Knowledge

Education

Bachelors degree in Computer Science

Job description

Engineering, Tech Risk Officer, Associate, Singapore

SDLC and Runtime focuses on delivering engineer-first, scalable platforms for job scheduling, Compute-as-a-Service, file transfer, firmwide software distribution and software development, including CI/CD (Gitlab ecosystem).

Software Development Life Cycle (SDLC) is a suite of products that provides build and deploy tooling for Engineers in the firm. It provides a modern, secure and highly available plant that facilitates source control, code review, build, test and production activation.

Distributed Scheduling offers scalable, highly available and efficient platforms and services for job scheduling, grid computing, Compute-as-a-Service, file transfer and software distribution across the firm.

Primary customer base for SDLC and Runtime are Global Markets Division (GMD) and Consumer and Investment Management Division (CIMD). Also significant customer usage in the Infrastructure Group (Core Engineering) and Investment Banking Division (IBD) Engineering.

Job Description

Report this job

SDLC and Runtime focuses on delivering engineer-first, scalable platforms for job scheduling, Compute-as-a-Service, file transfer, firmwide software distribution and software development, including CI/CD (Gitlab ecosystem).

Software Development Life Cycle (SDLC) is a suite of products that provides build and deploy tooling for Engineers in the firm. It provides a modern, secure and highly available plant that facilitates source control, code review, build, test and production activation.

Distributed Scheduling offers scalable, highly available and efficient platforms and services for job scheduling, grid computing, Compute-as-a-Service, file transfer and software distribution across the firm.

Primary customer base for SDLC and Runtime are Global Markets Division (GMD) and Consumer and Investment Management Division (CIMD). Also significant customer usage in the Infrastructure Group (Core Engineering) and Investment Banking Division (IBD) Engineering.

MORE ABOUT THIS ROLE

The Technology Risk Officer will be responsible for representing, managing and communicating technology risk for SDLC & Runtime. This requires representing firmwide control requirements and specific control requirements related to this division. The Technology Risk Officer will be primarily focused on controls in business applications/processes that support the SDLC & Runtime (Distributed Scheduling, Wavefront Engineering and SDLC etc).

RESPONSIBILITIES

• Interact with SDLC & Runtime engineering stakeholders to understand and communicate risks to critical infrastructure and systems, defining potential business impact, and tracking commitments to apply effective mitigating controls.
• Review and approve business continuity and application disaster recovery plans and test results to ensure that applications under SDLC & Runtime are able to achieve their recovery time objectives.
• Drive the completion of divisional commitments and milestones under SDLC & Runtime under the firmwide Engineering Risk Assessment (ERA) program, including collaborating with application owners and the divisional milestones owners on remediation actions, timelines, prioritization and resource planning.
• Host the global SDLC & Runtime production engineering call on a weekly basis to ensure that post mortem reports for critical and high risk incidents are followed-up on a timely basis to reduce the occurrence of recurring incidents.
• Drive adoption of application security, technology privacy, privilege management and vulnerability management controls as part of the Software Development Life Cycle (SDLC) and production management (DevOps) processes.
• Track the progress of remediation of control gaps identified by firmwide control programs, application security and vulnerability testing, Internal Audit, self-testing, or controls self-assessment.
• Assist in the execution of the access and entitlements recertification, and the SOX404 and operational risk control self-assessments by evaluating the key risks and assessing mitigating controls and evidence to determine the risk profile for the organization.
• Assist in the development and monitoring of key risk indicators (KRIs) that are mapped to various risks and controls to determine control gaps, and advise application development teams on implementing risk mitigation measures.
• Communicate the impact of technology risks and the approach to mitigation/acceptance, and provide risk assessment and advisory services to technology engineers, and technology and business management.
• Collaborate with the global Technology Risk Governance, Application Risk, Vulnerability Management, Privilege Management, Risk Measurement, and other global Technology Risk teams to develop and integrate best-in-class security and resiliency controls and practices.
• Contribute to the technical understanding, adoption and convergence of information security standards, solutions and tools.

CORE SKILLS AND EXPERIENCE REQUIRED

• 3 years experience driving controls adoption based on information security policies, procedures or standards.
• Experience of managing / delivering IT Risk advice and improvement projects.
• Experience in managing diverse business and IT stakeholders at all levels of seniority.
• A proven ability to manage and monitor program timelines, deliverables, budgets and financial performance.
• A good understanding of technology platforms.

PREFERRED EXPERIENCE

• Bachelors degree in Computer Science, Computer Engineering, or a related field.
• Good knowledge of different operating systems, databases, networking, security concepts and technologies from an IT risk and controls perspective.
• Ability to identify and assess complex IT risks and controls, to relate them to the wider business environment and to express opinions clearly to all levels.
• Ability to spot opportunities to add value and work with colleagues in other lines of business to help find solutions to the challenges they face.
• Ability to work flexibly in terms of working hours to accommodate tight timelines and manage well under pressure.

The Goldman Sachs Group, Inc., 2024. All rights reserved. Goldman Sachs is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, national origin, age, veterans status, disability, or any other characteristic protected by applicable law.

Locations - Opportunity Overview

CORPORATE TITLE: Associate
OFFICE LOCATION(S): Singapore
JOB FUNCTION: Software Engineering
DIVISION: Engineering Division

• Job Function: IT Software : Software Products & Services