Roles and Key Responsibilities
- Drive strategic roadmap and execution of the enterprise PAM program.
- Establish and maintain firm-wide privileged access standards, controls, and operating procedures.
- Lead cross-functional initiatives spanning IAM, Infrastructure, Cloud, Application Engineering, and Technology Risk teams.
- Develop and execute multi-year PAM capability uplift programs.
- Define and oversee governance processes for privileged accounts, privileged roles, break-glass access, and privileged activities.
- Ensure alignment with internal security standards, regulatory requirements, and industry frameworks such as NIST.
- Partner with Technology Risk, Compliance, Internal Audit, and regulators to address PAM-related findings and remediation activities.
- Build and maintain Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs) for executive reporting
- Partner with engineering teams to implement PAM controls within enterprise platforms and applications.
- Drive automation for onboarding, provisioning, certification, monitoring, and de-provisioning privileged access.
- Support cloud and hybrid environments, ensuring secure management of privileged identities across modern infrastructure.
- Influence architectural decisions that improve security while maintaining operational efficiency.
- Develop executive dashboards measuring PAM coverage, privileged account inventory, JIT adoption, MFA coverage, review completion rates, and control effectiveness.
- Provide regular updates to senior management committees and leadership.
- Translate technical risk into business-focused insights and recommendations.
Required Qualifications
- Bachelor’s degree in computer science, Cybersecurity, Information Systems, Engineering, or equivalent practical experience.
- 7+ years of experience in Cybersecurity, IAM, PAM, Information Security, Technology Risk, or Security Engineering.
- Strong understanding of Privileged Access Management (PAM), Identity and Access Management (IAM), Zero Trust security principles, role-based access controls and privileged role governance, secrets management and vault technologies, modern authentication and MFA, security monitoring and detection engineering, and cloud security across AWS, Azure, and GCP environments.
- Strong stakeholder management and executive communication skills.
- Experience driving cross-functional initiatives involving engineering, risk, compliance, and audit teams.
Preferred Qualifications
- Familiarity with security and regulatory frameworks such as NIST CSF, NIST 800-53, ISO 27001, FFIEC, SOX, or similar standards, with experience supporting regulatory exams or audit engagements.
- Experience with CyberArk, BeyondTrust, HashiCorp Vault, AWS IAM, Entra ID PIM, or equivalent PAM technologies is an advantage.
- Relevant security certifications, such as CISSP, CISM, CRISC, CCSP, or PAM/IAM-related credentials, are highly desirable.
Why Join Us
This is an opportunity to build and scale one of the firm's most strategic cybersecurity programs. You will work with senior leaders, security architects, engineers, and risk professionals to shape the future of privileged
Skills Required
- Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, or equivalent practical experience
- 7+ years of experience in Cybersecurity, IAM, PAM, Information Security, Technology Risk, or Security Engineering
- Strong understanding of Privileged Access Management (PAM), Identity and Access Management (IAM), Zero Trust, and role-based access controls
- Experience with secrets management and vault technologies, modern authentication and MFA, and security monitoring/detection engineering
- Experience securing cloud environments across AWS, Azure, and GCP
- Strong stakeholder management and executive communication skills
- Experience driving cross-functional initiatives involving engineering, risk, compliance, and audit teams
- Familiarity with security/regulatory frameworks such as NIST CSF, NIST 800-53, ISO 27001, FFIEC, SOX
- Experience with CyberArk, BeyondTrust, HashiCorp Vault, AWS IAM, Entra ID PIM or equivalent PAM technologies
- Relevant security certifications such as CISSP, CISM, CRISC, CCSP, or PAM/IAM-related credentials
Goldman Sachs Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Goldman Sachs and has not been reviewed or approved by Goldman Sachs.
-
Healthcare Strength — Coverage includes medical, dental, vision, disability, life and accident insurance, with multiple plan options and most premiums subsidized; coverage often starts on day one. Wellness resources, on-site health centers in some locations, and EAP access reinforce the depth of health support.
-
Parental & Family Support — Family care includes on-site childcare in some offices, expectant parent resources, and transitional programs for returning parents. Feedback suggests parental leave is very generous, with reports of around 20 weeks paid leave and stipends for adoption, surrogacy, and fertility-related services.
-
Retirement Support — The firm provides a 401(k) plan with employer matching contributions and broad financial education to help employees plan for retirement. Resources also support saving for education and preparing for unexpected events.
Goldman Sachs Insights
What We Do
At Goldman Sachs, we believe progress is everyone’s business. That’s why we commit our people, capital and ideas to help our clients, shareholders and the communities we serve to grow. Founded in 1869, Goldman Sachs is a leading global investment banking, securities and investment management firm. Headquartered in New York, we maintain offices in all major financial centers around the world. More about our company can be found at www.goldmansachs.com







