Posted 16 days ago
No clicks
**VP Security Engineering | Asset & Wealth Management | NYC | 7+ Yrs Exp** Lead global portfolio security posture. Minimum 7+ years in cyber role, with 3+ years managerial. Manage security incidents, risk assessments, and vendor evaluations. Collaborate with executives to advise on cyber strategy and reporting. Essential skills: Technical proficiency, excellent communication, understanding of regulatory landscape, experience in private equity/VC environments. Familiarity with ISO/IEC 27001, NIST frameworks, HIPAA, PCI-DSS, GDPR. Desirable: relevant security qualifications, AI/ML security risks knowledge. Comp: $130K - $250K. Benefits: Goldman Sachs' wide range of health, financial, family care & wellness offerings.
- Compensation
- $130,000 – $250,000 USD
- City
- New York City
- Country
- United States
Currency: $ (USD)
Full Job Description
Overview
The GS Value Accelerator partners with our portfolio companies to build enduring businesses and create incremental value by leveraging the GS network, our differentiated resources, and our highly distinguished operating advisors. We drive value for our portfolio companies in 5 key areas that include Scaling Revenue; Operational Excellence; Technical, Digital, and Data Transformation; Talent & Organizational Strategy; and ESG & Risk Optimization.
The Digital Advisory Council (DAC) is a proprietary group that partners our digital experts and GS Tech Risk team with companies to drive value creation leveraging data and digital tooling. As part of the DAC, the Portfolio Cybersecurity Advisor oversees the security posture of the global portfolio, partnering with portfolio company executives to drive security strategy and reporting on cyber-related risks and challenges to deal team executive leadership. As a trusted security advisor, responsibilities will include providing steer on cyber-related incidents, cybersecurity due diligence, and advising on information security program elements.
Key Responsibilities
- Provide oversight on the security posture of the global portfolio
- Measure and track cyber improvements across the portfolio
- Provide steer on cyber-related incidents
- Assess and report on the cyber risk to deal team executives
- Develop cybersecurity best practice materials for portfolio company leadership
- Evaluate cybersecurity vendors to be used in a referral capacity
- Identify opportunities for process improvements and drive change management initiatives
- Foster a culture of innovation, collaboration, and continuous improvement within the team
Qualifications & Skills
Essential
- Minimum of 7+ years of experience in cyber role, with at least 3 years in a managerial role
- Bachelor's degree in computer science or related field
- Excellent communication and interpersonal skills; the ability to build advisory relationships with a foundation of trust and responsibility.
- Strong understanding of common cyber security risks, threats and regulatory landscape approaches and challenges across organisational environments.
- Experience advising or operating within private equity, venture capital, or growth equity environments, including working across multiple portfolio companies simultaneously.
- Demonstrated ability to present cyber risk to non-technical stakeholders, including deal team executives, board members, and investment committee.
- Experience managing cross-organizational cyber incidents, breach notification processes, and crisis communications.
- Knowledge of cyber security and risk frameworks and standards, including but not limited to ISO/IEC 27001, NIST CSF, NIST SP 800-53.
- Knowledge of regulatory and compliance landscape, including but not limited to HIPAA, PCI-DSS, NIS2, DORA, GDPR, CCPA.
Desirable
- Relevant security qualifications (e.g. MSC Information Security, CISSP, CISM, CCSP)
- Understanding of AI/ML security risks, including LLM security, data poisoning, and AI governance frameworks.
- Understanding of operational technology security for industries including, energy/utilities, manufacturing, transportation.
- Strong proficiency in cloud security architecture and posture management across AWS, Azure, and/or GCP.
- Experience leading cyber diligence for M&A transactions, including pre-acquisition risk assessment, post-acquisition integration, and 100-day planning.
- Familiarity with cyber insurance underwriting process and premium pricing
ABOUT GOLDMAN SACHS
At Goldman Sachs, we commit our people, capital and ideas to help our clients, shareholders and the communities we serve to grow. Founded in 1869, we are a leading global investment banking, securities and investment management firm. Headquartered in New York, we maintain offices around the world.
We believe who you are makes you better at what you do. We're committed to fostering and advancing diversity and inclusion in our own workplace and beyond by ensuring every individual within our firm has a number of opportunities to grow professionally and personally, from our training and development opportunities and firmwide networks to benefits, wellness and personal finance offerings and mindfulness programs. Learn more about our culture, benefits, and people at GS.com/careers.
Were committed to finding reasonable accommodations for candidates with special needs or disabilities during our recruiting process. Learn more: https://www.goldmansachs.com/careers/footer/disability-statement.html
The Goldman Sachs Group, Inc., 2023. All rights reserved.
Goldman Sachs is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, national origin, age, veterans status, disability, or any other characteristic protected by applicable law.
Salary Range
The expected base salary for this New York, New York, United States-based position is $130000-$250000. In addition, you may be eligible for a discretionary bonus if you are an active employee as of fiscal year-end.
Benefits
Goldman Sachs is committed to providing our people with valuable and competitive benefits and wellness offerings, as it is a core part of providing a strong overall employee experience. A summary of these offerings, which are generally available to active, non-temporary, full-time and part-time US employees who work at least 20 hours per week, can be found here.
