Asset Management Information Security Lead

SRI Conference; Dallas (TX); On-site; USD 180,000 - 280,000; Full time

Job summary

Goldman Sachs seeks an Information Security Officer for Asset Management to define and oversee the security posture for the Asset Management Private business, balancing commercial goals with robust controls.

You will lead GRC, application security, advisory, and product security teams, guiding embedded Technology Risk Officers to unify risk management and regulatory compliance across Asset Management. This role drives secure innovation and strong risk oversight.

Qualifications

• Experience: 3-5 years of progressive experience in multi-domain information security including vendor/app security, vulnerability management, data loss prevention, data encryption, and infrastructure security.

Responsibilities

• Define, implement, and oversee information security and cybersecurity risk posture within Asset Management Private business.
• Lead Governance, Risk & Compliance (GRC), Application Security & Advisory, and Product Security functions.
• Guide embedded Technology Risk Officers to unify risk management and regulatory compliance across Asset Management.
• Advise on integrating security controls into development of critical business applications.
• Develop and communicate risk assessments and mitigation strategies to technology engineers and management.
• Drive adoption of secure SDLC practices and deep security expertise across teams.
• Contribute to the convergence of information security standards, tools, and metrics.

Skills

Security leadership

GRC management

Regulatory knowledge

Threat modeling

Communication skills

Risk assessment

Cloud security

Security standards

Education

BS/MS in CS/InfoSec

CISSP/CISM/CRISC/CISA or cloud certs

Tools

NIST/ISO frameworks

OWASP ASVS

Job description

Goldman Sachs seeks an Information Security Officer for Asset Management to define and oversee the security posture for the Asset Management Private business, balancing commercial goals with robust controls.

You will lead GRC, application security, advisory, and product security teams, guiding embedded Technology Risk Officers to unify risk management and regulatory compliance across Asset Management. This role drives secure innovation and strong risk oversight.