Head of Asset Management Security & Risk

SRI Conference; Dallas (TX); On-site; USD 180,000 - 240,000; Full time

Job summary

Goldman Sachs is seeking a Lead Information Security Officer for Asset Management to define and oversee the security program within the Asset Management Private business. This role balances business objectives with robust controls and regulatory compliance.

You will lead GRC, Application Security & Advisory, Product Security, and embed Technology Risk Officers across the vertical, driving unified risk management and secure innovation.

Qualifications

• 5+ years in multi-domain information security with vendor/app security experience.
• Deep knowledge of global financial regulations (SEC, FINRA, GDPR, CCPA).
• Proven leadership of global security teams.
• Experience aligning security with product development and SDLC.
• Familiarity with NIST, OWASP, SANS Top 20, PCI DSS, CIS Controls.

Responsibilities

• Lead GRC, App Security & Advisory, and Product Security for Asset Management.
• Guide embedded Technology Risk Officers across Asset Management Private.
• Advise developers on security controls to integrate into applications.
• Assess applications for design-related security risks and remediations.
• Communicate risk posture and mitigation strategies to executives.
• Develop security testing strategies to complement existing programs.
• Converge security standards across teams and tooling.
• Mentor security teams and oversee risk governance initiatives.
• Collaborate with global risk and audit partners to close findings.

Skills

Multi-domain information security

Application security

Regulatory risk management

Leadership & team management

Communication

Risk assessment

Security standards

Education

Bachelor's or Master's in Computer Science / Information Security

Tools

Vulnerability scanning tools

Cloud security tooling

Job description

Goldman Sachs is seeking a Lead Information Security Officer for Asset Management to define and oversee the security program within the Asset Management Private business. This role balances business objectives with robust controls and regulatory compliance.

You will lead GRC, Application Security & Advisory, Product Security, and embed Technology Risk Officers across the vertical, driving unified risk management and secure innovation.