Technology Risk - Dallas- Data Privacy Associate

You will join a progressive Technology Risk team which continues to push the development of security controls within engineering functions and across the business. You will interact with all parts of the firm, gaining experience and knowledge that will facilitate future career growth., * Support the planning, execution, and enhancement of data protection and personal data security initiatives, focusing on technical controls and security reviews.

• Drive the adoption of robust data security controls and privacy-enhancing technologies (e.g., encryption, data masking, access controls) across applications and platforms to uplift the control posture for personal data.
• Assist in developing scalable processes to ensure data security controls are operating effectively and align with privacy-by-design principles.
• Provide advice and guidance to engineering teams on applying relevant security policies and standards, and on integrating security controls defined in the firm’s Technology Risk and Control Framework to enable privacy by design from the outset.
• Participate in global, regional, and local Technology Risk initiatives aimed at improving the firm’s baseline on data security, resiliency, and controls of technology processes and services related to personal data.
• Conduct security reviews of systems and applications to identify potential data privacy risks and recommend technical mitigation strategies.
• Collaborate with Legal and Compliance to understand regulatory requirements (e.g., GDPR, CCPA) and translate them into actionable technical security controls.
• Provide clear and concise verbal and written recommendations and guidance to business and technology staff on matters of personal data security and privacy-enabling technical controls.

We are looking for a self-motivated candidate with a strong technical background and experience in data security or data risk management to join a team focused on strengthening personal data security and implementing privacy-by-design principles through technical controls., * Bachelor’s degree in information/cyber security, Computer Science, Software Engineering, or a related technical field.

• 1-3 years of experience in security, technical risk management, or data protection function.
• Strong understanding of data security concepts and practices, including encryption, access controls, data minimization, and data de-identification.
• Familiarity with privacy-by-design principles and their practical implementation within technology solutions.
• Technical knowledge of technology architecture, infrastructure, and the Software Development Lifecycle (SDLC).
• Experience with data analysis tools like Excel, PowerBI, or Alteryx.
• Proven analytical thinking abilities and problem-solving skills, particularly in assessing technical security risks related to data privacy.
• Excellent oral, written, and presentation communication skills, with the ability to explain complex technical details to diverse audiences.
• Ability to work effectively in a team environment and independently, * Relevant industry certifications (e.g., Security+, CySA+, CCSP, CIPT, CISSP, CIPM).
• Experience with technical risk analysis and control frameworks (e.g., NIST Cybersecurity Framework, ISO 27001/27701).
• Understanding of relational database technologies (e.g., SQL) and data storage principles.
• Knowledge of networking technologies and operating systems.
• Familiarity with data lifecycle management, data mapping, and inventory from a security control perspective.
• An understanding of the regulatory environment related to technology control requirements, with an emphasis on how security controls address global data protection regulations.

Pulled from the full job description

• Childcare
• Parental leave
• Health insurance
• Dental insurance
• Adoption assistance
• Life insurance
• Employee assistance program, We Offer Best-In-Class Benefits Healthcare & Medical Insurance We offer a wide range of health and welfare programs that vary depending on office location. These generally include medical, dental, short-term disability, long-term disability, life, accidental death, labor accident and business travel accident insurance. Holiday & Vacation Policies We offer competitive vacation policies based on employee level and office location. We promote time off from work to recharge by providing generous vacation entitlements and a minimum of three weeks expected vacation usage each year. Financial Wellness & Retirement We assist employees in saving and planning for retirement, offer financial support for higher education, and provide a number of benefits to help employees prepare for the unexpected. We offer live financial education and content on a variety of topics to address the spectrum of employees’ priorities. Health Services We offer a medical advocacy service for employees and family members facing critical health situations, and counseling and referral services through the Employee Assistance Program (EAP). We provide Global Medical, Security and Travel Assistance and a Workplace Ergonomics Program. We also offer state-of-the-art on-site health centers in certain offices. Fitness To encourage employees to live a healthy and active lifestyle, some of our offices feature on-site fitness centers. For eligible employees we typically reimburse fees paid for a fitness club membership or activity (up to a pre-approved amount). Child Care & Family Care We offer on-site child care centers that provide full-time and emergency back-up care, as well as mother and baby rooms and homework rooms. In every office, we provide advice and counseling services, expectant parent resources and transitional programs for parents returning from parental leave. Adoption, surrogacy, egg donation and egg retrieval stipends are also available. Benefits at Goldman Sachs Read more about the full suite of class-leading benefits our firm has to offer. Opportunity Overview CORPORATE TITLEAssociate OFFICE LOCATION(S)Dallas JOB FUNCTIONSecurity Engineering DIVISIONEngineering Division