Internal Audit-Dallas-Vice President-Technology Audit

About the role

As the third line of defense, Internal Audit’s mission is to independently assess the firm’s internal control structure—including governance processes and controls, risk management, capital and anti-financial crime frameworks—and raise awareness of control risk while monitoring management’s implementation of control measures. Internal Audit communicates and reports on the effectiveness of the firm’s governance, risk management and controls that mitigate current and evolving risk, assesses the firm’s control culture and conduct risks, and monitors management’s implementation of control measures.

Goldman Sachs Internal Audit comprises individuals from diverse backgrounds including chartered accountants, developers, risk management professionals, cybersecurity professionals, and data scientists. Teams are organized globally to cover all the firm’s businesses and functions, including securities, investment banking, consumer and investment management, risk management, finance, cyber-security and technology risk, and engineering. Investment Management covers the firm’s Private Wealth Management and Asset Management businesses. Investment Banking covers the firm’s investment banking activities and Global Investment Research operations.

Responsibilities

• Assist or lead the risk assessment, scoping and planning of a review.
• Assist or lead in executing the review, focusing on analyzing the design of controls around the underlying system architecture in the context of information technology controls and its impact on the business.
• Analyze business and technology processes to evaluate the design and effectiveness of relevant technology controls by designing and executing tests to validate identified system control features, which may require data analysis, code inspection and re-performance of system processes.
• Document the results of test steps executed within the IA automated document project repository per departmental guidelines.
• Assist or lead in vetting audit observations.
• Assist or lead in tracking, monitoring and recording remediation of risks identified in reviews.

Requirements

• At least 8+ years of experience in technology audit, with a focus on Financial Services Technology audit.
• Minimum of a bachelor’s degree in a technology-related field.
• Technology audit skills including an understanding of:
  • System architecture, with high-level understanding of databases, operating systems and messaging.
  • Testing automated IT application controls.
  • System Development/Programming Languages/Databases and System Architecture (Distributed/Messaging).
  • Operating Systems and data analysis skills (SQL, ACL, or similar tools).
  • Application security principles.
  • System development lifecycle (SDLC).
  • Management, monitoring and operations of technology (backups, change management, system monitoring, incident/problem management).
  • Business continuity planning and disaster recovery design and implementation.
  • Security within the software development lifecycle.
  • Ability to review/develop code (object-oriented languages such as Java, C#, C++).
  • Experience in managing audit engagements or technology projects.
  • Relevant certification or industry accreditation (e.g., CISA, CISSP).
• Ability to work effectively across a large global audit team and understand the team’s role in the overall strategy of the firm.
• Strong written and verbal communication skills; strong interpersonal skills essential.
• Frequent interaction with technology management required.
• Ability to multitask while managing time and workload.