The Role
Leads firm-wide technology failure operational risk management, including risk identification, monitoring, control testing, RCSA, scenario analysis, event reviews, and remediation. Partners with engineering and senior management to challenge technology processes and controls across SDLC, resilience, cloud, networking, IT asset management, and incident response. Uses data analysis and regulatory frameworks to identify trends, assess emerging risks, and strengthen enterprise risk practices.
Summary Generated by Built In
The Operational Risk Department at Goldman Sachs is an independent risk management function responsible for developing and implementing a standardized framework to identify, measure, and monitor operational risk across the firm.
The Technology Failure Risk Lead role is for a professional with deep technology subject matter expertise dedicated to actively employing and strengthening the components of the firm’s operational risk management framework relating to technology risks. This role will be responsible to continuously identify, monitor, measure, assess, and challenge firm-wide technology process, risk, and controls.
Responsibilities:
- Identify, monitor, and analyze operational risks arising from the execution of technology operations primarily related to SDLC, Technology Resilience, Network, Cloud, ITAM, Incident Response. and develop evidence-based challenges focused on improving such operations.
- Develop and perform ongoing analysis of Operational Risk loss, near miss, and external events to inform RCSA results, technology assessments and scenario analysis.
- Conduct data analysis to identify trends and patterns in technology failure domains augmenting such with qualitative observations to monitor risk taking trends through bespoke metrics at firmwide and divisional/sub-divisional levels, escalating concerns to senior management when warranted.
- Contribute to divisional and functional risk profile assessments by highlighting risk issues and trends to senior divisional managers and senior Operational Risk management team.
- Conduct evidence-based scenario analysis by working with stakeholders to develop plausible tail risk scenarios around unauthorized or improper access used in quantifying specific businesses exposure to potential risk.
- Facilitate operational risk event and data collection; perform detailed reviews of trends to identify significant risks and ensure monitoring and remediation.
- Review New Activities and ensure operational risks arising from acquisitions, new products and/or business, and migrations, etc. are properly considered.
- Contribute to review and challenge of technology failure control assessments to ensure the risk and control self -assessment outcomes are consistent, credible, and underpinned by appropriate evidence.
- Remain current on business drivers, regulatory and industry changes impacting the firms information and cybersecurity activities and obligations.
- Identify and drive initiatives that improve the risk management activities at the firm
- This role requires an energetic self-starter that can liaise with Engineering teams both regionally and globally. Experience and knowledge in a regulated enterprise network, preferably financial institution’s technology infrastructure/applications and control requirements are required together with strong interpersonal and analytical skills for this role. Qualifications
- 7+ years of relevant experience, which could include working in operational risk; in a financial institution’s technology division; a technology company that builds or maintains enterprise systems, like cloud services; offensive or defensive cybersecurity; or IT or Information Security/Cybersecurity auditors.
- Strong understanding of technology application and infrastructure components such as servers, storage, databases, networking, SDLC, AI/ML, Cloud platforms, etc.
- Proven ability to perform monitoring & testing (design and operating effectiveness) of controls across Technology Failure domains (e.g. SDLC, Change Management, Incident Response, Capacity, Resilience, etc.)
- Strong business acumen with general awareness of technology related processes, risks and business flows
- Strong verbal and written communication skills with the ability to present with impact and influence
- Experience with frameworks like NIST, FFIEC, COBIT, Cloud Security Alliance Cloud Controls Matrix, and/or ISO 27001
- Ability to work in a fast-paced environment with a strong delivery focus
- Strong organizational skills (project management experience a plus)
- Ability to work in a team environment and knowledge share with other colleagues within team
- Proficiency in World, Excel, PowerPoint, SharePoint/OneDrive – SQL, graph databases and Tableau (would be a plus)
- Relevant certifications like CISA (Certified Information Systems Auditor), CISM (Certified Information Security Manager) or related IAM certifications
- Familiarity with enterprise risk management best-practices and controls
- BA or BS College Degree in Business, Sciences, or Engineering.
ABOUT GOLDMAN SACHS
At Goldman Sachs, we commit our people, capital and ideas to help our clients, shareholders and the communities we serve to grow. Founded in 1869, we are a leading global investment banking, securities and investment management firm. Headquartered in New York, we maintain offices around the world.
We believe who you are makes you better at what you do. We're committed to fostering and advancing diversity and inclusion in our own workplace and beyond by ensuring every individual within our firm has a number of opportunities to grow professionally and personally, from our training and development opportunities and firmwide networks to benefits, wellness and personal finance offerings and mindfulness programs. Learn more about our culture, benefits, and people at GS.com/careers.
We’re committed to finding reasonable accommodations for candidates with special needs or disabilities during our recruiting process. Learn more:
© The Goldman Sachs Group, Inc., 2023. All rights reserved.
Goldman Sachs is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, national origin, age, veterans status, disability, or any other characteristic protected by applicable law.
About UsAbout the program
Our Off-Cycle Program varies in length based on program/university for undergraduate students. You will be fully immersed in our day-to-day activities.
As a participant, you will:
- Receive training designed to help you succeed
- Have the opportunity to work on real responsibilities alongside fellow interns and our people
- Each applicant has the opportunity to apply to up to 4 separate business / location combinations in any given recruiting year. Any additional application will be auto withdrawn. In order to apply to an additional opportunity, you must withdraw a current application that has not been turned down.
- A single applicant should not create multiple email addresses to apply to additional opportunities
Skills Required
- 7+ years of relevant experience in operational risk, financial institution technology, enterprise systems, cybersecurity, or IT/information security audit
- Strong understanding of servers, storage, databases, networking, SDLC, AI/ML, cloud platforms, and related technology infrastructure
- Experience monitoring and testing the design and operating effectiveness of technology controls
- Strong business acumen and understanding of technology processes, risks, and business flows
- Strong verbal and written communication skills with ability to present and influence
- Experience with NIST, FFIEC, COBIT, Cloud Security Alliance Cloud Controls Matrix, and/or ISO 27001
- Ability to work in a fast-paced environment with strong delivery focus
- Strong organizational and teamwork skills
- Proficiency in Word, Excel, PowerPoint, SharePoint/OneDrive
- SQL, graph databases, and Tableau experience
- CISA, CISM, or related IAM certification
- Familiarity with enterprise risk management best practices and controls
- Bachelor's degree in Business, Sciences, or Engineering
Goldman Sachs Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Goldman Sachs and has not been reviewed or approved by Goldman Sachs.
-
Healthcare Strength — Coverage includes medical, dental, vision, disability, life and accident insurance, with multiple plan options and most premiums subsidized; coverage often starts on day one. Wellness resources, on-site health centers in some locations, and EAP access reinforce the depth of health support.
-
Parental & Family Support — Family care includes on-site childcare in some offices, expectant parent resources, and transitional programs for returning parents. Feedback suggests parental leave is very generous, with reports of around 20 weeks paid leave and stipends for adoption, surrogacy, and fertility-related services.
-
Retirement Support — The firm provides a 401(k) plan with employer matching contributions and broad financial education to help employees plan for retirement. Resources also support saving for education and preparing for unexpected events.
Goldman Sachs Insights
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
At Goldman Sachs, we believe progress is everyone’s business. That’s why we commit our people, capital and ideas to help our clients, shareholders and the communities we serve to grow. Founded in 1869, Goldman Sachs is a leading global investment banking, securities and investment management firm. Headquartered in New York, we maintain offices in all major financial centers around the world. More about our company can be found at www.goldmansachs.com
