Technology Risk VP - Cybersecurity Controls & Strategy

The Goldman Sachs Group; Dallas (TX); On-site; USD 150,000 - 210,000; Full time

Job summary

Goldman Sachs is seeking a senior security controls leader to oversee risk across engineered systems and infrastructure. You will design, implement, and continually improve a robust control framework, collaborating with product, security, and risk teams to reduce noise, enhance automation, and ensure regulatory alignment with NIST, ISO, COBIT, and CIS standards.

The role requires deep experience in security controls, cloud security, and IT governance, with the ability to communicate complex

Qualifications

• Hands-on experience designing and assessing security controls across engineered systems and infrastructure.
• Experience developing IT policies and procedures following recognized IT management methodologies.
• Strong understanding of enterprise tech topics including cloud, IAM, microservices, APIs, CI/CD, logging and monitoring.

Responsibilities

• Oversee security risks and controls as part of the first line of defense, identifying weaknesses, recommending improvements, and educating control program owners on risk posture across engineering products, including AI initiatives.
• Develop, implement, and enhance the control management framework, processes, standards, and guidelines to ensure robust, ongoing security control management across all systems and infrastructures.
• Improve the design and execution of existing security controls to reduce noise, automate control execution and evidence capture, and streamline manual steps.
• Foster a culture of partnership and transparency with control, process and risk ownership teams, serving as the SME on control design and operation.
• Assess and review technology and security policies, standards, and control changes to ensure regulatory alignment.
• Review and evaluate security control designs across engineering systems, applications, and infrastructure for robust risk mitigation and compliance with standards (NIST, ISO, COBIT, CIS, CSA CCM).
• Execute and maintain an integrated, risk-aligned security control environment mapped to the firm’s risk taxonomy and business objectives.
• Establish sustainable operational oversight mechanisms, including KRIs, control health metrics, and continuous monitoring to proactively manage risk.
• Translate complex control strategies into clear business terms for senior leadership and stakeholders.

Skills

Security controls

Risk management

Cloud security

Communication skills

Regulatory frameworks

Education

Bachelor's degree

Tools

AWS

Azure

GCP

Job description

Goldman Sachs is seeking a senior security controls leader to oversee risk across engineered systems and infrastructure. You will design, implement, and continually improve a robust control framework, collaborating with product, security, and risk teams to reduce noise, enhance automation, and ensure regulatory alignment with NIST, ISO, COBIT, and CIS standards.

The role requires deep experience in security controls, cloud security, and IT governance, with the ability to communicate complex