VP, Risk Governance & Secure Engineering

Goldman Sachs; New York (NY); On-site; USD 176,000 - 264,000; Full time

Job summary

Goldman Sachs is seeking a Vice President, Risk Governance in New York to lead transformation of the Technology Risk function, driving effective and efficient information security and cyber security programs. You will partner with Technology Risk and Engineering leaders to define measurable goals and align transformation activities with regulatory drivers.

You will perform Application Security Assessments, review securing architecture and standards, and document the results.

Qualifications

• Master’s degree or Bachelor’s with five years’ experience in risk/governance or security roles.
• Experience with risk management frameworks, control environments, and regulatory drivers.
• Experience in software engineering or cybersecurity environments.

Responsibilities

• Lead transformation of Technology Risk function to increase effectiveness and efficiency of security programs.
• Perform Application Security Assessments (code reviews, pen tests, design reviews, threat modelling).
• Review securing architecture, policies, standards; document processes and controls.
• Identify vulnerabilities in software and development processes; propose remediation.
• Research new cloud services and advise secure cloud adoption.
• Collaborate with stakeholders to understand software architectures and communicate threats and risks.

Skills

Project management

Risk management

Data analysis

Microsoft Excel

Education

Master’s degree in CS/Cyber Security or related field

Bachelor’s degree in CS/Cyber Security or related field

Job description

Goldman Sachs is seeking a Vice President, Risk Governance in New York to lead transformation of the Technology Risk function, driving effective and efficient information security and cyber security programs. You will partner with Technology Risk and Engineering leaders to define measurable goals and align transformation activities with regulatory drivers.

You will perform Application Security Assessments, review securing architecture and standards, and document the results.