About Goldman Sachs

Goldman Sachs is a leading global investment banking, securities, and investment management firm providing financial services to corporations, financial institutions, governments, and individuals.

Goldman Sachs currently has 187 open roles on FindRole.

Listed pay typically runs $130,000–$250,000 across 60 roles with salary data.

Most-posted roles

View all roles at Goldman Sachs

At a glance

TL;DR · Vice President, Security Engineering

Role Posting Log in to save

The Head of Technology Risk for Wealth Management is a senior leadership role responsible for defining and overseeing comprehensive information security within the division. This leader will manage teams focused on Governance, Risk & Compliance (GRC), Application Security & Advisory, and Product Security, ensuring robust regulatory compliance and secure technological innovation. Key responsibilities include strategic planning aligned with NIST Cybersecurity Framework, leading risk assessments, and collaborating with engineering teams to integrate automated security practices into the SDLC using Agile methodologies. The role requires deep expertise in cryptography, cloud security (AWS preferred), and web technologies, along with extensive experience in financial services regulations such as SEC, FINRA, GDPR, CCPA, GLBA, and state-specific privacy laws. Ideal candidates have a proven track record of building high-performing global teams and driving complex security initiatives to completion.

Skills

AWS NIST Cybersecurity Framework OWASP Top 10 CI/CD FAIR RCSA SEC FINRA GDPR CCPA GLBA HTTP HTML5 AJAX REST OAuth SAML OIDC Python Java Go AI ML

What you'll do

Define and execute the multi-year Technology Risk roadmap for Wealth Management.
Lead divisional RCSA process to identify and mitigate technology risks.
Oversee embedded Technology Risk Officers across Wealth Management business verticals.
Ensure secure design principles are integrated into all Wealth Management applications.
Champion "Shift Left" philosophy by embedding security in SDLC using Agile methods.
Drive integration of AI/ML for automated risk detection and threat intelligence.

What we're looking for

Over 12 years of experience in Technology Risk or Information Security, including at least 5 years in senior leadership within Financial Services.
Deep expertise in cryptography, cloud security principles (AWS preferred), and web stack technologies.
Expert knowledge of global financial regulations and risk management methodologies like FAIR.
Proven ability to lead high-performing teams and influence diverse stakeholders.
Strong program management skills with a track record of successful complex security initiative delivery.
Exceptional communication skills for articulating technical risks and solutions to both technical and executive audiences.
Experience in performing risk assessments, identifying compliance gaps, and recommending mitigation strategies.