This role pays more than
58%
of similar roles. Most pay
$168,687–$256,250
— the shaded band above.
At the midpoint, this role pays about
$220k
versus about
$212k
for comparable roles.
Based on 240 similar postings.
Employer
About Goldman Sachs
Goldman Sachs is a leading global investment banking, securities, and investment management firm providing financial services to corporations, financial institutions, governments, and individuals.
Goldman Sachs currently has
134 open roles
on FindRole.
Listed pay typically runs
$137,000–$250,000
across 55 roles with salary data.
Engineering Division-New York-Vice President, Risk Governance-10424173 is a leadership role within the Engineering Division focused on transforming and optimizing the Technology Risk function to enhance information security and cyber security programs. The successful candidate will partner with leadership to align transformation activities with strategic objectives and regulatory drivers while performing Application Security Assessments including code reviews, penetration tests, design reviews, and threat modeling. Daily responsibilities involve identifying software vulnerabilities, reviewing securing architecture, and researching secure cloud service integration. The role requires expertise in software engineering fundamentals, risk management methodologies, and data analysis using Microsoft Excel. The position addresses critical security risks by providing consulting, analyzing component designs for threats, and collaborating with incident management and forensic personnel to defend against cyber threat actors within a complex financial services technology environment.
Transform and optimize the Technology Risk function to improve information security and cyber security program effectiveness.
Align risk transformation activities with divisional strategic objectives and regulatory requirements.
Perform application security assessments including code reviews, penetration tests, design reviews, and threat modeling.
Develop and document security architecture, policies, standards, and definitions for software applications.
Identify vulnerabilities in software designs and processes to mitigate organizational security risks.
Research and identify secure methods for the firm to leverage new cloud services.
Analyze software component architectures to identify threats and provide remediation advice to owners.
Collaborate with incident management and forensic teams to develop a deeper understanding of cyber threat actors.
What we're looking for
A Master's degree in Computer Science, Computer Engineering, Cyber Security Engineering, or a related field and three years of relevant experience.
A Bachelor's degree in Computer Science, Computer Engineering, Cyber Security Engineering, or a related field and five years of relevant experience.
Experience in technical Project Management or Program Management within the financial services or technology industry.
Experience with target Operating Model (TOM), control frameworks, process engineering, automation, and location strategy.
Experience in software engineering fundamentals, identifying risks, assessing mitigating controls, and recommending improvements to the control environment.
Experience working within an engineering or cybersecurity environment involving risk, compliance, regulatory, or information technology/security.
Experience with risk management methodologies and frameworks.
Experience in data analysis and visualization including Microsoft Excel.
Python
C++
R
Machine Learning
Time-Series Analysis
Monte Carlo Simulation
Conformal Prediction
Feature Engineering
Model Risk Management
Econometrics
Statistical Learning
Hyperparameter Tuning
Exploratory Data Analysis
Cybersecurity
Cloud Security
Threat Modeling
OWASP Top 10
SANS Top 25
SDLC
CI/CD
Zero Trust
AI
Network Infrastructure
Data Flow Analysis
Information Security Controls
Risk Assessment
Application Security
Information Security Frameworks
Identity and Access Management (IAM)
Risk Management
SOX
Data Analysis
Artificial Intelligence
Cloud Platforms
Web Services
Distributed Systems
Control Testing