Internal Audit, Cloud Technology Audit, Sr. Vice President, New York

Responsibilities

• Performing regular risk assessments for the area of coverage
• Regularly meeting the business/engineering stakeholders and building strong relationships with management
• Continuously monitoring business and technology developments
• Maintaining awareness of regulatory requirements and developments, as well as industry standards
• Leading audit work, including defining the scope of risks and controls, assessing controls design and effectiveness, reviewing audit work and reporting findings to internal and external management
• Validating the closure of management action points
• Managing, coaching and developing the team

Qualifications

• More than 15 plus years of relevant audit experience focusing on Financial Services
• Possess a degree in Computer Science, Information Security, Engineering or equivalent
• Highly motivated with strong analytical skills, willing and able to learn new business and system processes quickly
• Able to work effectively across a large audit team, understanding the team's role in the overall strategy of the firm
• Able to multitask while managing both time and workload
• Excellent written and verbal communication skills; strong interpersonal skills are essential
• Deep understanding of Cloud computing, technologies, risks and mitigating controls
• In-depth understanding of cloud computing concepts, architecture, and service models (IaaS, PaaS, SaaS)
• Familiarity with cloud-native security tools and services (e.g., AWS Security Hub, Azure Security Center, GCP Security Command Center)
• Proficiency in auditing various cloud services, including compute, storage, networking, databases, and serverless functions
• Proficiency in auditing controls related to cloud security configurations, identity and access management (IAM), data encryption, network security, logging and monitoring, and incident response within cloud platforms
• Understanding of DevOps, CI/CD pipelines, and infrastructure as code (IaC) in a cloud context
• Relevant certification or industry accreditation

Skills

• Deep understanding of Cloud computing, technologies, risks and mitigating controls
• In-depth understanding of cloud computing concepts, architecture, and service models (IaaS, PaaS, SaaS)
• Familiarity with cloud-native security tools and services (e.g., AWS Security Hub, Azure Security Center, GCP Security Command Center)
• Proficiency in auditing various cloud services, including compute, storage, networking, databases, and serverless functions
• Proficiency in auditing controls related to cloud security configurations, identity and access management (IAM), data encryption, network security, logging and monitoring, and incident response within cloud platforms
• Understanding of DevOps, CI/CD pipelines, and infrastructure as code (IaC) in a cloud context

Benefits

The expected base salary for this New York, New York, United States-based position is $100000-$250000. In addition, you may be eligible for a discretionary bonus if you are an active employee as of fiscal year-end.

Goldman Sachs is committed to providing our people with valuable and competitive benefits and wellness offerings, as it is a core part of providing a strong overall employee experience. A summary of these offerings, which are generally available to active, non-temporary, full-time and part-time US employees who work at least 20 hours per week, can be found here.