This listing doesn't post a salary. Most similar roles pay
$158,057–$246,287.
Based on 240 similar postings.
Employer
About Goldman Sachs
Goldman Sachs is a leading global investment banking, securities, and investment management firm providing financial services to corporations, financial institutions, governments, and individuals.
Goldman Sachs currently has
98 open roles
on FindRole.
Listed pay typically runs
$130,000–$250,000
across 41 roles with salary data.
As a Vice President within the Technology Risk team, you will oversee security risks and controls as part of the first line of defense to protect infrastructure from cyber threats. You will be responsible for developing, implementing, and enhancing the control management framework while improving the design and execution of existing security controls across engineering products, including those utilizing traditional, generative, and agentic AI. Your daily work involves rationalizing duplicative controls, automating evidence capture, and translating complex risk mitigation strategies into non-technical terms for senior leadership. You will utilize a deep knowledge of frameworks such as NIST SP 800-53, ISO 27001, and COBIT to manage risks across cloud computing environments including AWS, Azure, and GCP. Key technical competencies include identity and access management, microservices, APIs, containerization, CI/CD pipelines, and modern software engineering practices.
Identify security weaknesses and recommend improvements for engineering products including AI and generative AI systems.
Develop and enhance the control management framework, standards, and guidelines to ensure robust security across all infrastructure.
Optimize existing security controls by reducing noise, removing manual steps, and automating execution and evidence capture.
Evaluate security control designs against industry standards like NIST, ISO 27001, and CIS Controls.
Map engineering systems and application controls directly to the firm's risk taxonomy and business objectives.
Establish operational oversight mechanisms including key risk indicators (KRIs) and continuous monitoring metrics.
Translate complex technical risks and mitigation strategies into clear terms for senior leadership and stakeholders.
What we're looking for
Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related quantitative discipline.
10+ years of relevant experience in security controls, technology risk management, cybersecurity, software engineering, cloud security, IT auditing, or a first/1.5-line risk and control function.
Hands-on experience assessing, designing, and redesigning security controls to improve operational performance rather than just attestation or testing.
Experience developing policies and procedures based on internationally recognized methodologies for Software Engineering and IT Technology.
Strong understanding of enterprise technology including cloud computing (AWS, Azure, GCP), IAM, microservices, APIs, containerization, CI/CD pipelines, and modern software engineering.
Deep knowledge of industry-standard security, technology risk, and control frameworks such as NIST SP 800-53, NIST CSF, ISO 27001, COBIT, CSA CCM, CIS Controls, or ITIL.
Strong verbal and written communication skills to present complex technical risks clearly to senior stakeholders in a fast-paced environment.
Relevant professional certifications such as CISA, CISM, CRISC, CISSP, or CCSP (preferred).