Cyber Risk & Security Engineering Associate

Goldman Sachs Group, Inc.; New York (NY); On-site; USD 137,000 - 183,000; Full time

Job summary

Goldman Sachs in New York, NY seeks an Associate, Security Engineering to perform security and technology risk assessments for business initiatives, review designs, and advise engineering teams on secure controls throughout the SDLC.

The role covers risk across applications and infrastructure, including cloud, third-party reviews, BAU and strategic initiatives to reduce risk, plus participation in RCSA and SOX testing to validate control effectiveness.

Qualifications

• Master’s degree (U.S. or foreign equivalent) in Cyber Security, Computer Science, Computer Engineering or related field with one year of experience, or Bachelor’s with three years of experience.
• Experience with application security standards and information security frameworks.
• Knowledge of cybersecurity across the risk management lifecycle including identification, assessment, mitigation, and monitoring.
• Experience supporting mitigation of technology risks through development and implementation of control recommendations.
• Experience with Identity and Access Management (IAM) principles, SoD, and control processes.
• Experience conducting control testing and validation, including RCSA and SOX evaluations.
• Experience reviewing resiliency and control evidence to assess system resilience and operational risk.
• Data analysis and reporting using AI or analytical models to support risk insights.

Responsibilities

• Perform security and technology risk assessments for business-initiated projects to identify risks and support adoption of appropriate controls.
• Evaluate system designs to ensure security requirements are incorporated, including review of control implementation and identification of control gaps.
• Advise engineering teams on risk considerations and support integration of security controls throughout the system development lifecycle.
• Assess risks across application and infrastructure environments, including cloud platforms, web services, and distributed systems, and recommend mitigation actions.
• Conduct risk reviews of third-party integrations to ensure compliance with firm standards and required control frameworks.
• Support execution of BAU and strategic initiatives to reduce operational and technology risk exposure.
• Perform control testing activities, including RCSA and SOX evaluations, and validate supporting evidence to assess control effectiveness.
• Conduct resiliency validation reviews by analyzing evidence related to system recovery and operational continuity.

Job description

Goldman Sachs in New York, NY seeks an Associate, Security Engineering to perform security and technology risk assessments for business initiatives, review designs, and advise engineering teams on secure controls throughout the SDLC.

The role covers risk across applications and infrastructure, including cloud, third-party reviews, BAU and strategic initiatives to reduce risk, plus participation in RCSA and SOX testing to validate control effectiveness.