Tech Risk Governance, Regulatory & Engagement Training & Awareness Analyst / Associate
WHO WE ARE
Led by the Chief Information Security Officer (CISO), Technology Risk secures Goldman Sachs against hackers and other cyber threats. We are responsible for detecting and preventing attempted cyber intrusions against the firm, helping the firm develop more secure applications and infrastructure, developing software in support of our efforts, measuring cybersecurity risk, and designing and driving implementation of cybersecurity controls. The team has global presence across the Americas, APAC, India and EMEA.
YOUR IMPACT
You will be a key addition to the Technology Risk Governance, Regulatory, and Engagement (GRE) team which provides governance over various aspects of the firm's information security and cyber security program, ensures regulatory obligations are understood and achieved, through the development and monitoring of controls and risks. You will specifically work towards enhancing the information security training and awareness program to promote a secure environment and an effective security culture.
Goldman Sachs has one of the most progressive Technology Risk teams in the industry and is continuing to push the development of risk in preference to security within technology and the business. Year on year success has led the team to work deeper into the organization and gain valuable insights into how technology needs to function, what its risk really is and how this impacts the business.
HOW WILL YOU FULFILL YOUR POTENTIAL
Within GRE, you will be a part of theTraining and Awareness Program and will be responsible for supporting firmwide security training and awareness to reduce security threats and risk, educating personnel on cybersecurity best practices and measuring adherence and behavior change.
This is an opportunity to
- Assist in high profile, global training projects that strengthen the firm's security posture and supports the Global Information Security and Cybersecurity Program
- Ensure that the Technology Risk Training and Awareness Program meets all regulations, industry best practice, and internal policy and compliance requirements
- Create, update, and deliver training initiatives and security content across various audiences that is clear and relevant, using available tools and channels
- Contribute to a creative and interactive Program that engages/motivates employees and effectively changes behaviors
- Collaborate with multiple internal teams to ensure training curriculum is appropriate, assigned and completed on-time
- Coordinate and plan training curriculum with external vendors for content creation, as needed
- Support the metrics framework that evaluates the effectiveness of Program activities
- Identify areas for improvement in security training and awareness and drive uplift
BASIC QUALIFICATIONS
- Bachelor's degree, or higher
- Knowledge of, and interest in, information security and/or cybersecurity and the financial services sector
- Organizational skills with demonstrated ability to manage multiple requests at the same time
- Ability to prioritize requests, work independently with minimal supervision, and adapt to changing needs in a dynamic work environment
- Knowledge of learning management systems, message distribution techniques and web delivery tools
- Creative thinking and understanding of audiences to produce engaging materials in a variety of formats and media
- Basic project management skills - the ability to plan and manage training development projects
- Excellent interpersonal skills with the ability to communicate effectively both verbally and in writing with all levels within the organization, including both technical and non-technical personnel
- Demonstrated competency in Microsoft Office the ability to analyze data using MS Excel, create interactive presentations in MS PowerPoint, and document processes in MS Word
- Exceptional attention to detail
PREFERRED QUALIFICATIONS
- 2-4 years of prior experience in a risk, compliance, regulatory, or information technology/security adjacent role
- Experience in developing training content in the Articulate 360 platform
- Experience preparing training and communications materials for large, diverse audiences
#TechRiskCybersecurity
ABOUT GOLDMAN SACHS
At Goldman Sachs, we commit our people, capital, and ideas to help our clients, shareholders, and the communities we serve to grow. Founded in 1869, we are a leading global investment banking, securities, and investment management firm. Headquartered in New York, we maintain offices around the world.
https//www.goldmansachs.com/careers/footer/disability-statement.html
The Goldman Sachs Group, Inc., 2024. All rights reserved.