Technology Risk - Control Enablement and Transformation-Dallas-Vice President

Goldman Sachs Group, Inc.; Dallas (TX); On-site; USD 200,000 - 300,000; Full time

Job summary

Goldman Sachs Group, Inc. is seeking a Vice President in Dallas to lead Technology Risk - Control Enablement and Transformation.

The role focuses on overseeing security controls, building an enterprise-wide control framework, and aligning risk to business objectives within a fast-paced financial services environment. You will drive improvements to control design, automate evidence capture, and collaborate with control owners and stakeholders to reduce noise while ensuring regulatory compliance.

Qualifications

• Hands-on security controls experience with design and operating effectiveness.
• Experience developing IT management policies and procedures per recognized methodologies.
• Strong understanding of cloud platforms, IAM, microservices, APIs, and CI/CD.
• Deep knowledge of security and control frameworks (NIST SP 800-53, NIST CSF, ISO 27001, COBIT, CSA CCM, CIS).
• 10+ years in security controls, technology risk, or related function in finance/tech.
• Clear written and spoken communication to senior stakeholders.

Responsibilities

• Oversee security risks and controls as first line of defense; educate owners on risk posture.
• Develop, implement, and enhance the control management framework and guidelines.
• Improve design and execution of existing controls; reduce noise and automate.
• Foster partnership with control, process, and risk teams; SME on control design.
• Assess policies and controls for regulatory alignment and industry standards.
• Review control designs across systems to ensure robust risk mitigation.
• Maintain an integrated, risk-aligned security control environment.
• Establish oversight mechanisms with KRIs and continuous monitoring.
• Translate complex risk strategies into clear business terms for leadership.

Skills

Security controls

Policy development

Cloud security

Communication to stakeholders

Risk management

NIST/ISO frameworks

Education

Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related

Tools

CI/CD pipelines

Logging & monitoring tooling

Containerization & microservices

Job description

Technology Risk - Control Enablement and Transformation-Dallas-Vice President

Job Description

Who We Are:

Led by the Chief Information Security Officer (CISO), Technology Risk secures Goldman Sachs against hackers and other cyber threats. We are responsible for detecting and preventing attempted cyber intrusions against the firm, helping the firm develop more secure applications and infrastructure, developing software in support of our efforts, measuring cybersecurity risk, and designing and driving implementation of cybersecurity controls. The team has global presence across the Americas, APAC, India and EMEA.

Goldman Sachs has one of the most progressive Technology Risk teams in the industry and is continuing to push the development of risk in preference to security within technology and the business. Year on year success has led the team to work deeper into the organization and gain valuable insights into how technology needs to function, what its risk really is and how this impacts the business.

Responsibilities include:

• Oversee security risks and controls as part of the first line of defense, identifying weaknesses, recommending improvements, and educating control program owners on risk posture across engineering products, including initiatives leveraging traditional AI, generative AI and agentic AI.
• Develop, implement, and enhance the control management framework, processes, standards, and guidelines - including defining what good control design and execution look like, to ensure robust, ongoing security control management across all systems and infrastructures.
• Improve the design and execution of existing security controls to reduce noise where possible and make them run smoothly, rationalizing duplicative or low-value controls, tuning thresholds and false positives, removing unnecessary manual steps, and automating control execution and evidence capture etc.
• Foster a culture of partnership, collaboration and transparency with control, process and risk owning teams, serving as the subject matter expert on security control design and operation.
• Assess and review technology and security policies, standards, and control changes to ensure comprehensive risk management and regulatory and industry standard alignment.
• Review and evaluate security control designs across engineering systems, applications, and infrastructure, including how controls are actually configured and operated, to ensure robust risk mitigation and compliance with industry standards (e.g., NIST SP 800-53, NIST CSF, ISO 27001, COBIT, CSA CCM, CIS Controls).
• Execute and maintain an integrated, risk-aligned security control environment, ensuring all engineering systems, applications, and infrastructure controls are mapped directly to the firm's risk taxonomy and business objectives.
• Establish and manage sustainable operational oversight mechanisms, including key risk indicators (KRIs), control health metrics, and continuous monitoring, to proactively manage and mitigate technology and security risks.
• Translate complex control implementation and risk mitigation strategies into clear, non-technical business terms for senior leadership and key stakeholders.

Basic Qualifications:

• Hands-on security controls experience, assessing control design and operating effectiveness, and redesigning controls to improve how they perform in practice (not solely attestation or testing-based assurance).
• Experience with developing policies and procedures according to internationally recognized methodologies for IT management in the domains related to Software Engineering and IT Technology.
• Strong understanding of enterprise technology concepts, including cloud computing (AWS, Azure, GCP), identity and access management, microservices, APIs, containerization, CI/CD pipelines, databases, logging and monitoring tooling, and modern software engineering practices.
• Framework Knowledge: Deep knowledge of industry-standard security, technology risk and control frameworks (e.g., NIST SP 800-53, NIST CSF, ISO 27001, COBIT, CSA CCM, CIS Controls, ITIL).
• 10+ years of relevant experience in security controls, technology risk management, cybersecurity, software engineering, cloud security, IT auditing, or a first/1.5-line risk and control function within financial services or a major technology company.
• Strong verbal and written communication skills with the ability to present complex technical risks clearly to senior stakeholders, combined with a strong delivery focus in a fast-paced environment.
• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related quantitative discipline.

Preferred Qualifications:

• Relevant professional certifications (e.g., CISA, CISM, CRISC, CISSP, CCSP) are highly desirable.

Job Info

• Job Identification 183347
• Job Category Vice President
• Posting Date 09/18/2026, 01:25 PM
• Locations Dallas, TX, United States

Healthcare & Medical Services

We believe who you are makes you better at what you do. We're committed to fostering and advancing diversity and inclusion in our own workplace and beyond by ensuring every individual within our firm has a number of opportunities to grow professionally and personally

We offer competitive vacation policies based on employee level and office location. We promote time off from work to recharge by providing generous vacation entitlements and a minimum of three weeks expected vacation usage each year.

Financial Wellness & Retirement

We assist employees in saving and planning for retirement, offer financial support for higher education, and provide a number of benefits to help employees prepare for the unexpected. We offer live financial education and content on a variety of topics to address the spectrum of employees’ priorities.

Health

We offer a medical advocacy service for employees and family members facing critical health situations, and counseling and referral services through the Employee Assistance Program (EAP). We provide Global Medical, Security and Travel Assistance and a Workplace Ergonomics Program. We also offer state-of-the-art on-site health centers in certain offices.

Fitness

To encourage employees to live a healthy and active lifestyle, some of our offices feature on-site fitness centers. For eligible employees we typically reimburse fees paid for a fitness club membership or activity (up to a pre-approved amount).

We offer on-site child care centers that provide full-time and emergency back-up care, as well as mother and baby rooms and homework rooms. In every office, we provide advice and counseling services, expectant parent resources and transitional programs for parents returning from parental leave. Adoption, surrogacy, egg donation and egg retrieval stipends are also available.

Benefits at Goldman Sachs

Read more about the full suite of class-leading benefits our firm has to offer.

Learn More