Overview
In this role you help assure the integrity of Goldman Sachs’ control environment within Internal Audit. You will assess technology-related risks and controls across the firm, support risk-based reviews, and communicate findings to senior management and risk committees. You address both governance and control improvements, with a focus on data, system architecture, and IT processes that support portfolio construction, reporting, and operations. This is a chance to work across global teams on meaningful control enhancements in a fast-paced environment.
Pay / Benefits
- benefits, wellness programs, personal finance offerings, mindfulness programs
- training and development opportunities
- flexible or supportive work culture (as implied by GS culture)
- opportunity to work across global teams
Responsibilities
- Assist/lead risk assessment, scoping and planning of reviews
- Assist/lead execution of reviews focusing on IT controls and business processes
- Analyze system architecture and its impact on technology controls
- Design and perform tests to validate control features (including data analysis and code inspection)
- Document test results in Internal Audit workflow application
- Assist/lead vetting of audit observations and tracking remediation of identified risks
Key requirements
- Minimum 8 years of experience in technology audit in Financial Services
- Understanding of system architecture, databases, operating systems, and messaging
- Experience testing automated IT application controls
- Knowledge of SDLC and security in software development
- Data analysis skills (SQL, ACL, or similar tools)
- Ability to review code (object-oriented languages)
- Relevant certifications (CISA, CISSP, etc)
- Strong written and verbal communication, ability to interact with technology management
- Experience with AI, data analytics tools and emerging technologies
- Audit management or technology project experience
- Ability to work across a large global audit team and manage multiple timelines
- Analytical mindset
- Professional skepticism
- Strong communication
- System architecture (distributed/messaging, cloud, emerging tech)
- Databases and operating systems
- Automated IT application controls testing
…
