Internal Audit – Foundation Engineering / Tech Risk and Cybersecurity, Associate, Singapore Singapore · Singapore · Associate
Goldman Sachs
Obtenez une réponse de cet employeur
Votre CV et votre lettre de motivation, adaptés exactement à ce que l’employeur recherche.
Avantages offerts par ce poste
Résumé du poste
Goldman Sachs Internal Audit is seeking professionals to join Foundation Engineering / Tech Risk and Cybersecurity. You will assess technology risks and controls across cloud, infrastructure, and platforms, collaborating with global teams to provide comprehensive audits.
Strong communication and analytical skills are essential to translate complex concepts into actionable findings. Applicants should have 4+ years in technology risk or audit, with familiarity in AWS/Azure/Google Cloud and
Qualifications
- Minimum 4 years in technology audit, cybersecurity audit, technology risk, or information security.
- Experience evaluating cloud, infrastructure, and cybersecurity controls.
- Ability to map architectures to risks and controls and perform evidence-based testing.
- Familiarity with standards like NIST, CIS, ISO 27001 and APAC regulatory expectations.
Responsabilités
- Participate in scoping, planning and execution of tech risk/audit engagements.
- Assess design and operating effectiveness of controls in cloud, infra and platforms.
- Conduct tests using technical evidence, configurations and stakeholder discussions.
- Identify control gaps and clearly articulate risks and remediation steps.
- Collaborate with global audit teams to cover technology platforms across regions.
- Communicate audit observations clearly to management.
Connaissances
Formation
Outils
Description du poste
As the third line of defense, Internal Audit’s mission is to independently assess the firm’s internal control structure, including its governance processes, risk management practices and control environment. Internal Audit evaluates the effectiveness of controls that mitigate current and emerging risks, raises awareness of control risk, and monitors management’s implementation of control measures.
Goldman Sachs Internal Audit is organized into global teams comprising business and technology auditors covering the firm’s businesses and functions, including technology, cybersecurity, engineering, risk management, finance and other critical areas.
Goldman Sachs Internal Auditors demonstrate strong risk and control mindsets, analytical skills and professional skepticism, and are able to effectively challenge and engage with management on technology risks and control measures.
We look for individuals who are curious about technology, enjoy understanding complex technology environments, and can translate technical concepts and risks into clear audit assessments. Successful candidates are comfortable working with global teams, building relationships across engineering and risk functions, and operating in a fast-paced and evolving technology environment.
The Internal Audit Foundation Engineering / Tech Risk and Cybersecurity team assesses technology and cybersecurity risks and controls across the firm’s technology environment.
The team’s coverage includes areas such as technology infrastructure, cloud platforms, cybersecurity, identity and access management, network and platform security, vulnerability and configuration management, resilience, data protection, technology operations, and emerging technologies.
The role involves:
- Executing technology and cybersecurity audits covering infrastructure, platforms, cloud environments, and other foundational technology services.
- Understanding complex technology environments and architectures, identifying key technology and cybersecurity risks, and evaluating whether controls are appropriately designed and operating effectively.
- Assessing controls across areas such as identity and access management, infrastructure and platform security, cloud security, vulnerability and patch management, configuration management, logging and monitoring, data protection, resilience, and incident management.
- Applying a strong risk and control mindset to evaluate both established technologies and new or evolving technology risks, including changes arising from cloud adoption, automation, and emerging technologies.
- Working closely with technology stakeholders and global Internal Audit teams to understand technology implementations, assess associated risks and communicate audit observations clearly and effectively.
- Considering relevant regulatory requirements, industry standards and supervisory expectations when assessing technology and cybersecurity controls, including requirements applicable within the APAC region.
A strong understanding of technology and cybersecurity concepts, together with experience in technology risk, cybersecurity or technology audit, is important for the role.
As part of the third line of defense, you will contribute to independent assessments of the firm’s technology and cybersecurity control environment and the effectiveness of controls designed to mitigate current and emerging risks.
You will work with technology and engineering teams as well as Internal Audit colleagues globally to identify and assess technology risks, communicate audit results to management and support the ongoing improvement of the firm’s control environment.
You will:
- Participate in the scoping, planning and execution of technology and cybersecurity audits, including identifying key risks and determining appropriate audit testing.
- Understand technology processes, architectures and controls and assess their design and operating effectiveness.
- Perform audit testing using a combination of technical evidence, data analysis, system configurations, documentation and discussions with engineering and technology stakeholders.
- Identify control gaps and clearly articulate the associated technology, cybersecurity, and business risks.Discuss audit observations and findings with local and global technology management.
- Contribute to audit reports and other communications that clearly articulate risks, control observations, and conclusions.
- Monitor and follow up on management’s remediation of identified audit findings.
- Collaborate with global audit teams to provide effective coverage of technology platforms and services that operate across regions.
- Maintain awareness of developments in cybersecurity, cloud, infrastructure, and emerging technology, as well as relevant regulatory and industry expectations.
- Minimum 4 years of relevant experience in technology audit, cybersecurity audit, technology risk, information security, engineering risk, or a related field.
- Good understanding of technology and cybersecurity risks and controls, with exposure to areas such as cloud computing, infrastructure, operating systems, networks, identity and access management, vulnerability management, cybersecurity monitoring, or technology resilience.
- Ability to understand technical architectures and processes and translate them into relevant risks, controls, and audit procedures.
- Strong analytical and problem-solving skills, with the ability to evaluate technical evidence and reach clear, supportable conclusions.
- Strong written and verbal communication skills and the ability to communicate effectively with both technical and non-technical stakeholders.
- Ability to work collaboratively across global teams and engage effectively with technology and engineering stakeholders.
- Ability to manage multiple priorities and deliver high-quality work in a dynamic environment.
- Familiarity with relevant technology/cybersecurity standards, frameworks, and regulatory expectations. Knowledge of APAC technology or cybersecurity requirements is beneficial.
- Degree in Computer Science, Information Security, Cybersecurity, Engineering, Information Systems, or a related discipline.
- Experience conducting audits or risk assessments of cloud environments, technology infrastructure, engineering platforms, or cybersecurity capabilities.
- Understanding of cloud and infrastructure technologies, including exposure to platforms such as AWS, Microsoft Azure or Google Cloud, and modern infrastructure technologies such as containers and Kubernetes.
- Familiarity with security and technology frameworks such as NIST Cybersecurity Framework, NIST 800-53, CIS Controls and ISO/IEC 27001.
- Familiarity with technology and cybersecurity regulatory expectations in jurisdictions such as Singapore and other APAC markets would be advantageous.
- Relevant professional certifications such as CISA, CISSP, CISM, CRISC, CCSP or cloud-provider certifications are advantageous.
- Experience using data analytics, scripting, or other technical techniques to support technology audits or control assessments is a plus.
- Degree in Computer Science, Information Security, Cybersecurity, Engineering, Information Systems, or a related discipline.
- Experience conducting audits or risk assessments of cloud environments, technology infrastructure, engineering platforms, or cybersecurity capabilities.
- Understanding of cloud and infrastructure technologies, including exposure to platforms such as AWS, Microsoft Azure or Google Cloud, and modern infrastructure technologies such as containers and Kubernetes.
- Familiarity with security and technology frameworks such as NIST Cybersecurity Framework, NIST 800-53, CIS Controls and ISO/IEC 27001.
- Familiarity with technology and cybersecurity regulatory expectations in jurisdictions such as Singapore and other APAC markets would be advantageous.
- Relevant professional certifications such as CISA, CISSP, CISM, CRISC, CCSP or cloud-provider certifications are advantageous.
- Experience using data analytics, scripting, or other technical techniques to support technology audits or control assessments is a plus.
At Goldman Sachs, we commit our people, capital and ideas to help our clients, shareholders and the communities we serve to grow. Founded in 1869, we are a leading global investment banking, securities and investment management firm. Headquartered in New York, we maintain offices around the world.
We believe who you are makes you better at what you do. We're committed to fostering and advancing diversity and inclusion in our own workplace and beyond by ensuring every individual within our firm has a number of opportunities to grow professionally and personally, from our training and development opportunities and firmwide networks to benefits, wellness and personal finance offerings and mindfulness programs. Learn more about our culture, benefits, and people at GS.com/careers.
Goldman Sachs is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, national origin, age, veterans status, disability, or any other characteristic protected by applicable law.
We offer a wide range of health and welfare programs that vary depending on office location. These generally include medical, dental, short-term disability, long-term disability, life, accidental death, labor accident and business travel accident insurance.
We assist employees in saving and planning for retirement, offer financial support for higher education, and provide a number of benefits to help employees prepare for the unexpected. We offer live financial education and content on a variety of topics to address the spectrum of employees’ priorities.
We offer a medical advocacy service for employees and family members facing critical health situations, and counseling and referral services through the Employee Assistance Program (EAP). We provide Global Medical, Security and Travel Assistance and a Workplace Ergonomics Program. We also offer state-of-the-art on-site health centers in certain offices.
To encourage employees to live a healthy and active lifestyle, some of our offices feature on-site fitness centers. For eligible employees we typically reimburse fees paid for a fitness club membership or activity (up to a pre-approved amount).
We offer on-site child care centers that provide full-time and emergency back-up care, as well as mother and baby rooms and homework rooms. In every office, we provide advice and counseling services, expectant parent resources and transitional programs for parents returning from parental leave. Adoption, surrogacy, egg donation and egg retrieval stipends are also available.
Read more about the full suite of class-leading benefits our firm has to offer.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
