Engineering, SDLC

Overview

SDLC and Runtime focuses on delivering engineer-first, scalable platforms for job scheduling, Compute-as-a-Service, file transfer, firmwide software distribution and software development, including CI/CD (Gitlab ecosystem).

Software Development Life Cycle (SDLC) is a suite of products that provides build and deploy tooling for Engineers in the firm. It provides a modern, secure and highly available plant that facilitates source control, code review, build, test and production activation.

Distributed Scheduling offers scalable, highly available and efficient platforms and services for job scheduling, grid computing, Compute-as-a-Service, file transfer and software distribution across the firm.

Primary customer base for SDLC and Runtime are Global Markets Division (GMD) and Consumer and Investment Management Division (CIMD). Also significant customer usage in the Infrastructure Group (Core Engineering) and Investment Banking Division (IBD) Engineering.

More About This Role

The Technology Risk Officer will be responsible for representing, managing and communicating technology risk for SDLC & Runtime. This requires representing firmwide control requirements and specific control requirements related to this division. The Technology Risk Officer will be primarily focused on controls in business applications/processes that support the SDLC & Runtime (Distributed Scheduling, Wavefront Engineering and SDLC etc).

Responsibilities

• Interact with SDLC & Runtime engineering stakeholders to understand and communicate risks to critical infrastructure and systems, defining potential business impact, and tracking commitments to apply effective mitigating controls.
• Review and approve business continuity and application disaster recovery plans and test results to ensure that applications under SDLC & Runtime are able to achieve their recovery time objectives.
• Drive the completion of divisional commitments and milestones under SDLC & Runtime under the firmwide Engineering Risk Assessment (ERA) program, including collaborating with application owners and the divisional milestones owners on remediation actions, timelines, prioritization and resource planning.
• Host the global SDLC & Runtime production engineering call on a weekly basis to ensure that post mortem reports for critical and high risk incidents are followed-up on a timely basis to reduce the occurrence of recurring incidents.
• Drive adoption of application security, technology privacy, privilege management and vulnerability management controls as part of the Software Development Life Cycle (SDLC) and production management (DevOps) processes.
• Track the progress of remediation of control gaps identified by firmwide control programs, application security and vulnerability testing, Internal Audit, self-testing, or controls self-assessment.
• Assist in the execution of the access and entitlements recertification, and the SOX404 and operational risk control self-assessments by evaluating the key risks and assessing mitigating controls and evidence to determine the risk profile for the organization.
• Assist in the development and monitoring of key risk indicators (KRIs) that are mapped to various risks and controls to determine control gaps, and advise application development teams on implementing risk mitigation measures.
• Communicate the impact of technology risks and the approach to mitigation/acceptance, and provide risk assessment and advisory services to technology engineers, and technology and business management.
• Collaborate with the global Technology Risk Governance, Application Risk, Vulnerability Management, Privilege Management, Risk Measurement, and other global Technology Risk teams to develop and integrate best-in-class security and resiliency controls and practices.
• Contribute to the technical understanding, adoption and convergence of information security standards, solutions and tools.

Core Skills and Experience Required

• 3+ years experience driving controls adoption based on information security policies, procedures or standards.
• Experience of managing / delivering IT Risk advice and improvement projects.
• Experience in managing diverse business and IT stakeholders at all levels of seniority.
• A proven ability to manage and monitor program timelines, deliverables, budgets and financial performance.
• A good understanding of technology platforms.

Preferred Experience

• Bachelor's degree in Computer Science, Computer Engineering, or a related field.
• Good knowledge of different operating systems, databases, networking, security concepts and technologies from an IT risk and controls perspective.
• Ability to identify and assess complex IT risks and controls, to relate them to the wider business environment and to express opinions clearly to all levels.
• Ability to spot opportunities to add value and work with colleagues in other lines of business to help find solutions to the challenges they face.
• Ability to work flexibly in terms of working hours to accommodate tight timelines and manage well under pressure.

Benefits

We offer a wide range of health and welfare programs that vary depending on office location. These generally include medical, dental, short-term disability, long-term disability, life, accidental death, labor accident and business travel accident insurance.

We offer competitive vacation policies based on employee level and office location. We promote time off from work to recharge by providing generous vacation entitlements and a minimum of three weeks expected vacation usage each year.

Financial Wellness & Retirement

We assist employees in saving and planning for retirement, offer financial support for higher education, and provide a number of benefits to help employees prepare for the unexpected. We offer live financial education and content on a variety of topics to address the spectrum of employees' priorities.

Health Services

We offer a medical advocacy service for employees and family members facing critical health situations, and counseling and referral services through the Employee Assistance Program (EAP). We provide Global Medical, Security and Travel Assistance and a Workplace Ergonomics Program. We also offer state-of-the-art on-site health centers in certain offices.

Fitness

To encourage employees to live a healthy and active lifestyle, some of our offices feature on-site fitness centers. For eligible employees we typically reimburse fees paid for a fitness club membership or activity (up to a pre-approved amount).

Child Care & Family Care

We offer on-site child care centers that provide full-time and emergency back-up care, as well as mother and baby rooms and homework rooms. In every office, we provide advice and counseling services, expectant parent resources and transitional programs for parents returning from parental leave. Adoption, surrogacy, egg donation and egg retrieval stipends are also available.

Benefits at Goldman Sachs

Read more about the full suite of class-leading benefits our firm has to offer.

#J-18808-Ljbffr

---