WHO WE ARE - GCDI - Cyber Ops Incident Manager
Led by the Chief Information Security Officer (CISO), Technology Risk secures Goldman Sachs against hackers and other cyber threats. We are responsible for detecting and preventing attempted cyber intrusions against the firm, helping the firm develop more secure applications and infrastructure, developing software in support of our efforts, measuring cybersecurity risk, and designing and driving implementation of cybersecurity controls. The team has global presence across the Americas, APAC, India and EMEA.
Within Technology Risk, the Global Cyber Defense and Intelligence (GCDI) identifies malicious activity, manage the lifecycle of vulnerabilities within GS technologies, and investigates and manages threats across the firm. We are a team of security, software, and product engineers that allow the firm to respond appropriately to firm risks through the use of detection models, security architecture, and cutting-edge cyber threat analysis to manage internal and external threats against the firm.
Goldman Sachs has one of the most progressive Technology Risk teams in the industry and is continuing to push the development of risk in preference to security within technology and the business. Year on year success has led the team to work deeper into the organization and gain valuable insights into how technology needs to function, what its risk really is and how this impacts the business.
YOUR IMPACT
In this position you will work alongside incident responders, security engineers, and firm leadership to respond, manage, and mitigate cyber threats. You will partner with colleagues from Compliance, Legal, HCM, Office of Global Security, and Internal Audit to leverage all available resources to protect the firm from cyber threats, recommend uplifts in: processes, procedures, and controls, and communicate the teams performance to leadership.
YOUR IMPACT HOW YOU WILL FULFILL YOUR POTENTIAL
Your responsibilities will include proactively identifying opportunities to improve the firm’s ability to prevent and respond to cyber incidents. To support this, you will be collaborating and partnering with your peers in the Incident Management Team, the Threat Management Center, Engineering, Third Party Risk Management, Legal, Audit, and Risk teams .
Responsibilities include:
Coordinate multiple work streams for complex incidents and events, manage Firm Leadership communications acting as a single point of contact
Identify and communicate risk and other Cyber Security themes via reports and recommendations in an effort to enable key constituents understand their risk position
Develop and maintain strong business and technology relationships, becoming a trusted partner to these stakeholders
Review and triage Incident Management cases. Manage cyber security incidents, including driving incidents to conclusion and lessons learned
Investigate moderate to complex events and communicate to leadership
Identify risk and other security themes and develop recommendations for resolution
Promote a team environment
BASIC QUALIFICATIONS
Broad understanding of Windows and Linux Operating Systems, networking protocols and cloud computing
Attention to detail
Responsive to challenging tasking
Clear sense of ownership and driven to manage tasks to completion
Ability to multitask and prioritize work effectively
Highly motivated self-starter
- Proven verbal and written communication skills, with an ability to clearly explain complex technical challenges
PREFERRED QUALIFICATIONS
- 2+ Years' relevant cybersecurity experience in cyber incident management, threat intelligence, investigations or data analysis
ABOUT GOLDMAN SACHS
At Goldman Sachs, we commit our people, capital and ideas to help our clients, shareholders and the communities we serve to grow. Founded in 1869, we are a leading global investment banking, securities and investment management firm. Headquartered in New York, we maintain offices around the world.
We believe who you are makes you better at what you do. We're committed to fostering and advancing diversity and inclusion in our own workplace and beyond by ensuring every individual within our firm has a number of opportunities to grow professionally and personally, from our training and development opportunities and firmwide networks to benefits, wellness and personal finance offerings and mindfulness programs. Learn more about our culture, benefits, and people at GS.com/careers.
We’re committed to finding reasonable accommodations for candidates with special needs or disabilities during our recruiting process. Learn more: https://www.goldmansachs.com/careers/footer/disability-statement.html
Skills Required
- Strong English verbal and written communication skills
- Strong presentation skills
- Highly motivated and passionate learner
- Strong sense of ownership and ability to manage tasks to completion
- Proficient scripting skills in Python and PowerShell
- Advanced understanding of Linux operating systems
- Experience designing cloud architecture, including security setup and incident response strategy
- Hands-on experience with Volatility, Rekall, The Sleuth Kit, Autopsy, and EnCase
- Ability to conduct cybersecurity investigations as a Level 2 analyst
- Understanding of artificial intelligence tools for productivity and security
- 1-4 years of experience triaging, analyzing, and responding to security events and conducting digital forensics
- Incident response experience in AWS, Google Cloud, or Microsoft Azure
- At least one certification: GNFA, GCFE, GCFA, CCFP, CFCE, ACE, OSCP, or GCFR
- Experience in security monitoring and cyber defense against AI-powered cyber attacks
Goldman Sachs Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Goldman Sachs and has not been reviewed or approved by Goldman Sachs.
-
Healthcare Strength — Coverage includes medical, dental, vision, disability, life and accident insurance, with multiple plan options and most premiums subsidized; coverage often starts on day one. Wellness resources, on-site health centers in some locations, and EAP access reinforce the depth of health support.
-
Parental & Family Support — Family care includes on-site childcare in some offices, expectant parent resources, and transitional programs for returning parents. Feedback suggests parental leave is very generous, with reports of around 20 weeks paid leave and stipends for adoption, surrogacy, and fertility-related services.
-
Retirement Support — The firm provides a 401(k) plan with employer matching contributions and broad financial education to help employees plan for retirement. Resources also support saving for education and preparing for unexpected events.
Goldman Sachs Insights
What We Do
At Goldman Sachs, we believe progress is everyone’s business. That’s why we commit our people, capital and ideas to help our clients, shareholders and the communities we serve to grow. Founded in 1869, Goldman Sachs is a leading global investment banking, securities and investment management firm. Headquartered in New York, we maintain offices in all major financial centers around the world. More about our company can be found at www.goldmansachs.com








