This listing doesn't post a salary. Most similar roles pay
$156,965–$225,337.
Based on 240 similar postings.
Employer
About Goldman Sachs
Goldman Sachs is a leading global investment banking, securities, and investment management firm providing financial services to corporations, financial institutions, governments, and individuals.
Goldman Sachs currently has
134 open roles
on FindRole.
Listed pay typically runs
$137,000–$250,000
across 55 roles with salary data.
Tech Risk, Risk Practices and Controls Management - Vice President, Dallas serves within the Digital Risk Office to manage the technology control landscape across the engineering division. This role involves developing and maturing risk practices, designing control management frameworks, and ensuring regulatory responsiveness for systems including those utilizing traditional, generative, and agentic AI. The individual will act as a trusted advisor to engineering leaders, translating complex compliance mandates into actionable requirements while overseeing risk posture across infrastructure and applications. Key responsibilities include monitoring global regulations like DORA and NIST, managing key risk indicators, and ensuring assessment readiness for internal and external audits. Candidates must possess expertise in cloud computing, microservices, APIs, and containerization, alongside deep knowledge of frameworks such as ISO 27001, COBIT, and NIST SP 800-53 to mitigate risks within the firm's technical architecture.
Develop and enhance the control management framework, processes, and standards for all systems and infrastructure.
Evaluate technology control designs across engineering systems to ensure alignment with industry standards like NIST and ISO.
Translate complex global regulatory mandates into actionable technical requirements for risk and process owners.
Identify weaknesses in risk postures and recommend improvements for products involving traditional, generative, and agentic AI.
Maintain an integrated, risk-aligned control environment mapped directly to the firm's risk taxonomy and business objectives.
Ensure continuous assessment readiness by documenting and evidencing controls for internal and external audits.
Establish sustainable operational oversight mechanisms including key risk indicators (KRIs) and continuous monitoring metrics.
Communicate complex risk mitigation strategies in non-technical terms to senior leadership and stakeholders.
What we're looking for
Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related quantitative discipline.
7+ years of relevant experience in technology risk management, cybersecurity, software engineering, cloud security, IT auditing, or a first/1.5-line risk and control function.
Experience developing policies and procedures using internationally recognized methodologies for Software Engineering and IT Technology.
Deep knowledge of industry-standard technology risk and control frameworks such as NIST SP 800-53, NIST CSF, ISO 27001, COBIT, CSA CCM, or ITIL.
Strong understanding of enterprise technology concepts including cloud computing (AWS, Azure, GCP), microservices, APIs, containerization, CI/CD pipelines, and databases.
Strong verbal and written communication skills to articulate complex technical risks to senior stakeholders in a fast-paced environment.
Relevant professional certifications such as CISA, CISM, CRISC, CISSP, or CCSP (preferred).