Security Engineering

As a member of the Goldman Sachs Technology Risk team, your role will involve leading threat and risk management initiatives to safeguard the firm and its clients from information and cyber security risks. You will be instrumental in equipping the firm with the necessary knowledge and tools to assess risk, identify threats, mitigate risks, and prevent unauthorized disclosure of confidential information. **Key Responsibilities:** - Plan, execute, and provide support for data protection and data risk management initiatives. - Drive the adoption of data protection controls across applications and platforms. - Develop scalable processes to ensure the effective operation of data protection controls. - Offer advice and guidance to engineering teams on applying security policies and standards, as well as adopting security controls outlined in the firm's Technology Risk and Control Framework. - Participate in global, regional, and local Technology Risk initiatives focused on enhancing data protection, resiliency, and technology process controls. - Deliver clear and concise verbal and written recommendations and guidance to business and technology staff on data protection and data risk management matters. **Qualifications Required:** - Bachelor's degree in Information/Cyber Security, Computer Science, or Software Engineering. - Minimum of 3 years of experience in a security or risk management role. - Strong understanding of data protection and data risk management concepts and practices. - Technical knowledge in technology architecture and infrastructure. - Hands-on data analysis experience with tools like Excel, PowerBI, or Alteryx. - Proven analytical thinking skills. - Excellent oral, written, and presentation communication abilities. - Capacity to document and articulate technical details clearly and concisely. - Strong team player with the ability to work independently. In addition to the above qualifications, the following are preferred: - Relevant industry certifications. - Experience with risk analysis and risk management frameworks and methodologies (ISO 27001, NIST, etc.). - Understanding of relational database technologies (e.g., SQL). - Knowledge of networking technologies, operating systems, and software development lifecycle (SDLC). - Familiarity with the regulatory environment related to technology control requirements, including global data protection regulations.,