Internal Audit, Cloud Technology Audit, Vice President, Dallas

Job Summary

As a Cloud Technology auditor in the Core Engineering team, you will be involved in independently assessing the firm’s overall control environment and communicating the results to the firm’s local and global management the effectiveness of the firm’s controls that mitigate current and emerging risks and monitoring the management’s implementation of control measures. In doing so, you are supporting the provision of independent, objective and timely assurance around the firm’s internal control structure, and supporting the Audit Committee, the Board of Directors and Risk Committee in fulfilling their oversight responsibilities.

Responsibilities

• Performing regular risk assessments for the area of coverage
• Regularly meeting the business/engineering stakeholders and building strong relationships with management
• Continuously monitoring business and technology developments
• Making sure regulatory requirements and developments, as well as industry standards, are met
• Leading audit work, including defining the scope of risks and controls, assessment of controls design and effectiveness, reviewing audit work and reporting findings to internal and external management
• Validating the closure of management action points
• Managing, coaching and developing the team

Qualifications

• More than 8 years of relevant audit experience focusing on Financial Services
• Possess a degree in Computer Science, Information Security, Engineering or equivalent
• Must be highly motivated with strong analytical skills, willing and able to learn new business and system processes quickly
• Able to work effectively across a large audit team, understanding the team's role in the overall strategy of the firm
• Able to multitask while managing both time and workload
• Written and verbal communication skills a must; strong interpersonal skills are essential

Required

• Technology audit skills including: Deep understanding of Cloud computing, technologies, risks and mitigating controls
• In-depth understanding of cloud computing concepts, architecture, and service models (IaaS, PaaS, SaaS)
• Familiarity with cloud-native security tools and services (e.g., AWS Security Hub, Azure Security Center, GCP Security Command Center)
• Proficiency in auditing various cloud services, including compute, storage, networking, databases, and serverless functions
• Proficiency in auditing controls related to cloud security configurations, identity and access management (IAM), data encryption, network security, logging and monitoring, and incident response within cloud platforms
• Understanding of DevOps, CI/CD pipelines, and infrastructure as code (IaC) in a cloud context
• Relevant certification or industry accreditation

About GS

At Goldman Sachs, we commit our people, capital and ideas to help our clients, shareholders and the communities we serve to grow. Founded in 1869, we are a leading global investment banking, securities and investment management firm. Headquartered in New York, we maintain offices around the world. We believe who you are makes you better at what you do. We're committed to fostering and advancing diversity and inclusion in our own workplace and beyond by ensuring every individual within our firm has a number of opportunities to grow professionally and personally, from our training and development opportunities and firmwide networks to benefits, wellness and personal finance offerings and mindfulness programs.