Engineering- Dallas- Associate, Risk Governance – 10431267

Goldman Sachs; Dallas (TX); On-site; USD 140,000 - 190,000; Full time

Job summary

Goldman Sachs in Dallas, TX seeks an Associate, Risk Governance to lead RCSA initiatives across the enterprise, partnering with engineering teams to identify operational and compliance risks. You will drive risk visualization, automate control evidence collection, and enable policy-as-code in engineering workflows with Generative AI tools.

You will triage incidents, coordinate audit responses, and uplift risk taxonomy while promoting a strong risk culture through training and onboarding for

Qualifications

• Master’s degree (U.S. or foreign equivalent) in Computer Science, Information Systems, Cyber Security, or related field; 1 year of experience OR Bachelor’s degree in same fields; 3 years of experience.
• Experience with risk frameworks (e.g., NIST CSF); statistical analysis to identify trends; visualizing data in risk reports; leveraging analytics and automation to enhance testing and sampling; developing data accuracy processes.

Responsibilities

• Lead and execute division-wide Risk and Control Self-Assessment (RCSA) initiatives.
• Identify operational and compliance risks across engineering processes including SDLC and CI/CD pipelines.
• Advance risk monitoring through dashboards and analytics; implement automated controls and evidence collection.
• Coordinate responses to internal audit findings; prepare materials for risk committees and senior management.

Skills

Risk governance

RCSA

SOX compliance

Data analysis

Root cause analysis

Communication to management

Training & onboarding

Education

Master’s degree in Computer Science / Information Systems / Cyber Security

Bachelor’s degree in Computer Science / Information Systems / Cyber Security

Tools

Tableau

GitHub Copilot

CI/CD

Policy-as-code

Job description

Job Description

Job Duties: Associate, Risk Governance with Goldman Sachs & Co. LLC in Dallas, Texas. Lead and execute division-wide Risk and Control Self-Assessment (RCSA) initiatives across the global enterprise to ensure full alignment with US and international regulatory standards. ConductRisk and Control Self-Assessments (RCSAs)across engineering processes including SDLC, CI/CD pipelines, cloud infrastructure, and production change management. Partner with engineering teams to identifyoperational risks(e.g. Technology operations risks, infosec and cyber risks, third party risks, data loss) andcompliance risks(e.g., data privacy, records management, regulatory reporting integrity). Drive the review, and optimization of analytical tools and dashboards to streamline the assessment, visualization, and reporting of RCSA and SOX mandates. Design, document, and operationalize preventive and detective controls embedded within engineering workflows (e.g., automated policy-as-code, pipeline gates, access provisioning checks). Use Generative AI tools (e.g., GitHub Copilot, internal LLM copilots, agentic workflow platforms) to automate control evidence collection and summarization, draft policies, risk assessments, and audit responses and triage and classify incidents and risk events at scale. Triage operational incidents and near-misses originating from engineering systems; perform root-cause analysis with SRE and engineering leads. Coordinate responses to internal audit findings, 2LoD challenge related to engineering processes. Prepare materials for Engineering Risk Committees and senior management forums; translate technical risk into business language. Promote a strong risk culture through training, lunch-and-learns, and onboarding for new engineers. Uplift risk taxonomy to reflect changes to risk profile for the Engineering Division - Identify new controls to effectively mitigate any gaps in risk exposure. Recommend best practices for design and execution of controls testing within GS Engineering areas and to validate the remediation of identified system control weaknesses, utilizing various techniques such as data analysis, code review, re-performance of processing logic, observation and interviews to evaluate the adequacy of operational and compliance risks and controls.

Job Description

Job Duties: Associate, Risk Governance with Goldman Sachs & Co. LLC in Dallas, Texas. Lead and execute division-wide Risk and Control Self-Assessment (RCSA) initiatives across the global enterprise to ensure full alignment with US and international regulatory standards. ConductRisk and Control Self-Assessments (RCSAs)across engineering processes including SDLC, CI/CD pipelines, cloud infrastructure, and production change management. Partner with engineering teams to identifyoperational risks(e.g. Technology operations risks, infosec and cyber risks, third party risks, data loss) andcompliance risks(e.g., data privacy, records management, regulatory reporting integrity). Drive the review, and optimization of analytical tools and dashboards to streamline the assessment, visualization, and reporting of RCSA and SOX mandates. Design, document, and operationalize preventive and detective controls embedded within engineering workflows (e.g., automated policy-as-code, pipeline gates, access provisioning checks). Use Generative AI tools (e.g., GitHub Copilot, internal LLM copilots, agentic workflow platforms) to automate control evidence collection and summarization, draft policies, risk assessments, and audit responses and triage and classify incidents and risk events at scale. Triage operational incidents and near-misses originating from engineering systems; perform root-cause analysis with SRE and engineering leads. Coordinate responses to internal audit findings, 2LoD challenge related to engineering processes. Prepare materials for Engineering Risk Committees and senior management forums; translate technical risk into business language. Promote a strong risk culture through training, lunch-and-learns, and onboarding for new engineers. Uplift risk taxonomy to reflect changes to risk profile for the Engineering Division - Identify new controls to effectively mitigate any gaps in risk exposure. Recommend best practices for design and execution of controls testing within GS Engineering areas and to validate the remediation of identified system control weaknesses, utilizing various techniques such as data analysis, code review, re-performance of processing logic, observation and interviews to evaluate the adequacy of operational and compliance risks and controls.<br><br>Job Requirements: Master’s degree (U.S. or foreign equivalent) in Computer Science, Information Systems, Management Science, Cyber Security, or a related field, and one (1) year of experience in the job offered or in a related role OR Bachelor’s degree (U.S. or foreign equivalent) in Computer Science, Information Systems, Management Science, Cyber Security, or a related field, and three (3) years of experience in the job offered or in a related role. Prior experience must include one (1) year of experience (with Master’s) or three (3) years of experience (with Bachelor’s) with each of the following: risk Frameworks including NIST Cybersecurity Framework (CSF); performing statistically driven analysis using various data analytical techniques to identify trends and propose process enhancements; visualizing complex data analyses from raw data in risk management reports, using visualization tools such as Tableau, and communicating results to a wide variety of audiences; leveraging analytics and automation experience to propose effective and efficient methods to enhance testing and sampling strategies to ensure the most effective risk detection and analyses; and developing processes and tools to identify and monitor data accuracy.<br><br>©The Goldman Sachs Group, Inc., 2026. All rights reserved. Goldman Sachs is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, national origin, age, veteran status, disability, or any other characteristic protected by applicable law.