Technology Audit

Internal Audit - Global Banking and Markets Engineering, Cyber Security SME - Vice President location_on Birmingham, West Midlands, England, United KingdomTEAM OVERVIEWGoldman Sachs Internal Auditors demonstrate strong risk and control mindsets, analytical, exercise professional scepticism, and are able to challenge and discuss effectively with management on risks and control measures. We look for individuals who enjoy learning about audit, businesses and functions, have innovative and creative mindsets to adopt analytical techniques to enhance audit techniques, building relationships and are able to evolve and thrive in teamwork and in a fast-paced global environment.Goldman Sachs Internal Audit comprises individuals from diverse backgrounds including chartered accountants, developers, risk management professionals, cybersecurity professionals, and data scientists. We are organized into global teams comprising business and technology auditors to cover all the firm's businesses and functions, including securities, investment banking, consumer and investment management, risk management, finance, cyber-security and technology risk, and engineering.This role is for a driven technology auditor to cover our Global Banking and Markets Division and to work as part of a team in integrated audits covering specific Global Banking and Markets sales and trading businesses as well as technology-led projects covering topics including electronic trading, trading platforms and technology control practices, and specializing in the information and cyber security risks and controlsTHE ROLE AND RESPONSIBILITIESAs the third line of defence, Internal Audit's mission is to independently assess the firm's internal control structure, including the firm's governance processes and controls, and risk management and capital and anti-financial crime frameworks, raise awareness of control risk and monitor the implementation of management's control measures.In doing so, Internal Audit perform the following duties:Communicates and reports on the effectiveness of the firm's governance, risk management and controls that mitigate current and evolving riskRaise awareness of control riskAssesses the firm's control culture and conduct risksMonitors management's implementation of control measuresAdditional responsibilities include:Performing regular risk assessments for the area of coverageRegularly meeting the business/engineering stakeholders and building strong relationships with managementAnalyzing the business and technology processes to evaluate the effectiveness of the relevant technology controls, including automated application controls and IT general controlsValidating that the scoped technology controls meet business, technology, and regulatory requirementsContinuously monitoring business and technology developmentsMonitoring regulatory requirements and developments, as well as industry standardsPerforming and leading audit work, including defining the scope of risks and controls assessment of controls design and effectiveness, reviewing audit work and reporting findings to internal and external managementValidating the closure of management action pointsManaging, coaching and developing team membersSKILLS AND EXPERIENCE REQUIRED9+ years’ work experience, and a degree in Computer Science, Information Security, Engineering, or equivalent discipline.Knowledge of financial markets, products and services.Understanding of management, monitoring, operations, and disaster recovery of systems with high availability.Experience with Data Analytics tools and techniques.Ability to review/develop code (Java, C++, Python, etc.)Cloud security / risk concepts, architecture, controls, implementation, and assessment.Security within the software development lifecycle and Infrastructure as Code.Vulnerability assessment and penetration testing methodologies and processes.Security risks related to web, mobile, serverless and containerized applications, and network infrastructure.Relevant technology standards and regulations – NIST Cyber Security Framework, Cloud Security Alliance CCM, FFIEC CAT, ISO 27001, GDPR, NYSDFS, data privacy rules, FFIEC IT handbooks etc.Sound understanding of internal control concepts, with the ability to evaluate and determine the appropriateness of controls through consideration of both business and technology risksTechnology audit skills including an understanding of:System architecture, with understanding of databases, operating systems and messagingPrior experience of testing automated IT application controls and IT general controlsData analysis skills over large datasets (Python experience is desirable)Ability to review codeAbility to work effectively across a large audit team, understanding the team's role in the overall strategy of the firm.Written and verbal communication skills a must; strong interpersonal skills essential. Job requires frequent interaction with technology management.Must be able to multitask while managing both time and workload.Must be highly motivated with strong analytical skills, willing and able to learn new business and system processes quickly.ABOUT GOLDMAN SACHSAt Goldman Sachs, we commit our people, capital and ideas to help our clients, shareholders and the communities we serve to grow. Founded in 1869, we are a leading global investment banking, securities and investment management firm. Headquartered in New York, we maintain offices around the world.We believe who you are makes you better at what you do. We're committed to fostering and advancing diversity and inclusion in our own workplace and beyond by ensuring every individual within our firm has a number of opportunities to grow professionally and personally, from our training and development opportunities and firmwide networks to benefits, wellness and personal finance offerings and mindfulness programs. Learn more about our culture, benefits, and people at GS.com/careers.We’re committed to finding reasonable accommodations for candidates with special needs or disabilities during our recruiting process. Learn more: https://www.goldmansachs.com/careers/footer/disability-statement.htmlGoldman Sachs is an equal employment/affirmative action employer Female/Minority/Disability/Veteran/Sexual Orientation/Gender IdentityHealthcare & Medical InsuranceWe offer a wide range of health and welfare programs that vary depending on office location. These generally include medical, dental, short-term disability, long-term disability, life, accidental death, labor accident and business travel accident insurance.We offer competitive vacation policies based on employee level and office location. We promote time off from work to recharge by providing generous vacation entitlements and a minimum of three weeks expected vacation usage each year.Financial Wellness & RetirementWe assist employees in saving and planning for retirement, offer financial support for higher education, and provide a number of benefits to help employees prepare for the unexpected. We offer live financial education and content on a variety of topics to address the spectrum of employees’ priorities.Health ServicesWe offer a medical advocacy service for employees and family members facing critical health situations, and counseling and referral services through the Employee Assistance Program (EAP). We provide Global Medical, Security and Travel Assistance and a Workplace Ergonomics Program. We also offer state-of-the-art on-site health centers in certain offices.FitnessTo encourage employees to live a healthy and active lifestyle, some of our offices feature on-site fitness centers. For eligible employees we typically reimburse fees paid for a fitness club membership or activity (up to a pre-approved amount).Child Care & Family CareWe offer on-site child care centers that provide full-time and emergency back-up care, as well as mother and baby rooms and homework rooms. In every office, we provide advice and counseling services, expectant parent resources and transitional programs for parents returning from parental leave. Adoption, surrogacy, egg donation and egg retrieval stipends are also available.Benefits at Goldman SachsRead more about the full suite of class-leading benefits our firm has to offer. #J-18808-Ljbffr