Engineering - Security Engineering - Warsaw- Associate - VIDM - IAM

WHO WE ARE

Led by the Chief Information Security Officer (CISO), Technology Risk secures Goldman Sachs against cyber threats. We are responsible for detecting and preventing attempted cyber intrusions against the firm, helping the firm develop more secure applications and infrastructure, developing software in support of our efforts, measuring cybersecurity risk, and designing and driving implementation of cybersecurity controls. The team has global presence across the Americas, APAC and EMEA. Within Technology Risk, the Vulnerability, Identity & Data Management (VIDM) TechRisk team is the consultative and technology subject matter expertise arm, responsible for assessing new technology initiatives for risk, partnering with engineers to architect and design secure products and services, embedding implementation reviews and guiding technology innovation in terms of security and control across Goldman Sachs.

OUR MISSION

The TechRisk IAM team safeguards Goldman Sachs identities as the first line of defense by collaborating with Engineering Teams, Operational Risk, and Internal Audit to establish robust controls and good practices for identity and access management, fostering a secure, resilient, and compliant environment for internal employees and external customers of the Firm.

In delivering on this mission, the TechRisk VIDM IAM team must:

• Collaborate with the rest of Technology Risk on information security and cybersecurity risk management throughout the firm across the IAM domain.
• Establish and maintain appropriate policies, standards, and controls to adequately address information security risks in accordance with best practices and applicable regulations across the IAM domain.
• Conduct ongoing testing and monitoring to evaluate adoption of necessary Engineering controls.
• Ensure that the firm's senior management and Board of Directors are cognizant of changes in the information security environment across the IAM domain.

YOUR IMPACT

In this role, you will join the global Technology Risk team and work closely with engineering teams to identify, assess, and mitigate cybersecurity risks across applications, systems, and technology architecture.

You will apply your technical cybersecurity knowledge to perform security assessments, review system and application architectures, identify potential vulnerabilities, and provide practical guidance to engineering teams. The role is particularly suited to someone with experience or a strong interest in penetration testing, security architecture, cybersecurity protocols, and technical security assessments.

Knowledge of Identity and Access Management (IAM) is beneficial, but is not a core requirement for the role.

HOW YOU WILL FULFILL YOUR POTENTIAL

You will become a trusted cybersecurity advisor to engineering teams, supporting them in designing and maintaining secure applications, platforms, and infrastructure.

You will:

• Perform security assessments and architecture reviews of applications, systems, and technology solutions.
• Identify potential vulnerabilities and security weaknesses through techniques such as penetration testing, threat modeling, and technical security reviews.
• Partner with engineering teams to recommend appropriate security controls and remediation approaches.
• Review technical designs and assess them against cybersecurity standards and best practices.
• Apply knowledge of security, authentication, authorization, networking, and cryptographic protocols when assessing technology solutions.
• Review and help remediate security findings in partnership with engineering teams.
• Contribute to the development and implementation of security standards, controls, and good practices.
• Communicate technical cybersecurity risks clearly to both engineering and non-technical stakeholders.

BASIC QUALIFICATIONS

• Bachelor's degree in Computer Science or a closely related technical discipline.
• Strong understanding of fundamental cybersecurity concepts and principles.
• Experience assessing applications, systems, or architectures for security vulnerabilities.
• Experience or knowledge of penetration testing, security architecture reviews, vulnerability assessment, or threat modeling.
• Good understanding of common security protocols, particularly authentication and authorization protocols.
• Understanding of common attacker tactics, techniques, and procedures and how they can be used to compromise applications, systems, credentials, or authentication flows.
• Understanding of fundamental cryptography concepts, including encryption, hashing, certificates, and key management.
• Ability to analyze security findings and work with engineering teams on appropriate remediation.
• Strong analytical, interpersonal, and communication skills.
• Fluent English.

PREFERRED QUALIFICATIONS

• Experience with Identity and Access Management (IAM) concepts or technologies.
• Knowledge of authentication and authorization standards such as OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, or Kerberos.
• Familiarity with technologies such as Microsoft Entra ID, Active Directory, Okta, Auth0, or PingFederate.
• Knowledge of Zero Trust, Privileged Access Management (PAM), MFA, or identity federation.
• Experience working with cybersecurity frameworks or controls such as NIST.
• Cybersecurity certifications such as CISSP, CISM, CCSP, or GIAC.
• Experience within financial services or another highly regulated environment.

ABOUT GOLDMAN SACHS

At Goldman Sachs, we commit our people, capital and ideas to help our clients, shareholders and the communities we serve to grow. Founded in 1869, we are a leading global investment banking, securities and investment management firm. Headquartered in New York, we maintain offices around the world.

We believe who you are makes you better at what you do. We're committed to fostering and advancing diversity and inclusion in our own workplace and beyond by ensuring every individual within the firm has a number of opportunities to grow professionally and personally, from our training and development opportunities and firmwide networks to benefits, wellness and personal finance offerings and mindfulness programs. Learn more about our culture, benefits, and people at GS.com/careers.

We’re committed to finding reasonable accommodations for candidates with special needs or disabilities during our recruiting process. Learn more: https://www.goldmansachs.com/careers/footer/disability-statement.html

© The Goldman Sachs Group, Inc., 2026. All rights reserved.

Goldman Sachs is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, national origin, age, veterans status, disability, or any other characteristic protected by applicable law.