Engineering- Dallas- Associate, Risk Governance – 10431267

About the Role

Associate, Risk Governance position with Goldman Sachs & Co. LLC in Dallas, Texas. This role focuses on leading and executing division-wide Risk and Control Self-Assessment (RCSA) initiatives to ensure alignment with US and international regulatory standards.

Responsibilities

• Conduct Risk and Control Self-Assessments (RCSAs) across engineering processes including SDLC, CI/CD pipelines, cloud infrastructure, and production change management.
• Partner with engineering teams to identify operational risks (e.g., technology operations risks, infosec and cyber risks, third-party risks, data loss) and compliance risks (e.g., data privacy, records management, regulatory reporting integrity).
• Drive the review and optimization of analytical tools and dashboards to streamline the assessment, visualization, and reporting of RCSA and SOX mandates.
• Design, document, and operationalize preventive and detective controls embedded within engineering workflows (e.g., automated policy-as-code, pipeline gates, access provisioning checks).
• Use Generative AI tools (e.g., GitHub Copilot, internal LLM copilots, agentic workflow platforms) to automate control evidence collection and summarization, draft policies, risk assessments, and audit responses, and triage and classify incidents and risk events at scale.
• Triage operational incidents and near-misses originating from engineering systems; perform root-cause analysis with SRE and engineering leads.
• Coordinate responses to internal audit findings and second-line-of-defense (2LoD) challenges related to engineering processes.
• Prepare materials for Engineering Risk Committees and senior management forums; translate technical risk into business language.
• Promote a strong risk culture through training, lunch-and-learns, and onboarding for new engineers.
• Uplift risk taxonomy to reflect changes to the risk profile for the Engineering Division; identify new controls to mitigate gaps in risk exposure.
• Recommend best practices for design and execution of controls testing within Goldman Sachs Engineering areas and validate remediation of identified system control weaknesses using techniques such as data analysis, code review, re-performance of processing logic, observation, and interviews.

Requirements

• Master’s degree (U.S. or foreign equivalent) in Computer Science, Information Systems, Management Science, Cyber Security, or a related field, and one (1) year of experience in the job offered or a related role.
• OR Bachelor’s degree (U.S. or foreign equivalent) in Computer Science, Information Systems, Management Science, Cyber Security, or a related field, and three (3) years of experience in the job offered or a related role.

Qualifications

Prior experience must include:

• One (1) year of experience (with Master’s) or three (3) years of experience (with Bachelor’s) with risk frameworks including NIST Cybersecurity Framework (CSF).
• Performing statistically driven analysis using various data analytical techniques to identify trends and propose process enhancements.
• Visualizing complex data analyses from raw data in risk management reports using visualization tools such as Tableau, and communicating results to a wide variety of audiences.
• Leveraging analytics and automation experience to propose effective and efficient methods to enhance testing and sampling strategies for risk detection and analyses.
• Developing processes and tools to identify and monitor data accuracy.