Technology Risk - Dallas- Data Privacy Associate

Dallas, TX

Full-time

Onsite

Entry Level

Goldman Sachs’ Technology Risk team leads threat and risk management initiatives that protect the firm and its clients from information and cybersecurity risks. The Data Privacy Associate will support personal data security initiatives, implement privacy-by-design technical controls, conduct security reviews, and advise engineering, business, Legal, and Compliance teams on data privacy risks and regulatory requirements.

Apply Now

Responsibilities

Support the planning, execution, and enhancement of data protection and personal data security initiatives, focusing on technical controls and security reviews
Drive the adoption of robust data security controls and privacy-enhancing technologies (e.g., encryption, data masking, access controls) across applications and platforms to uplift the control posture for personal data
Assist in developing scalable processes to ensure data security controls are operating effectively and align with privacy-by-design principles
Provide advice and guidance to engineering teams on applying relevant security policies and standards, and on integrating security controls defined in the firm’s Technology Risk and Control Framework to enable privacy by design from the outset
Participate in global, regional, and local Technology Risk initiatives aimed at improving the firm's baseline on data security, resiliency, and controls of technology processes and services related to personal data
Conduct security reviews of systems and applications to identify potential data privacy risks and recommend technical mitigation strategies
Collaborate with Legal and Compliance to understand regulatory requirements (e.g., GDPR, CCPA) and translate them into actionable technical security controls
Provide clear and concise verbal and written recommendations and guidance to business and technology staff on matters of personal data security and privacy-enabling technical controls

Qualification

Required

Bachelor's degree in information/cyber security, Computer Science, Software Engineering, or a related technical field
1-3 years of experience in security, technical risk management, or data protection function
Strong understanding of data security concepts and practices, including encryption, access controls, data minimization, and data de-identification
Familiarity with privacy-by-design principles and their practical implementation within technology solutions
Technical knowledge of technology architecture, infrastructure, and the Software Development Lifecycle (SDLC)
Experience with data analysis tools like Excel, PowerBI, or Alteryx
Proven analytical thinking abilities and problem-solving skills, particularly in assessing technical security risks related to data privacy
Excellent oral, written, and presentation communication skills, with the ability to explain complex technical details to diverse audiences
Ability to work effectively in a team environment and independently

Preferred

Relevant industry certifications (e.g., Security+, CySA+, CCSP, CIPT, CISSP, CIPM)
Experience with technical risk analysis and control frameworks (e.g., NIST Cybersecurity Framework, ISO 27001/27701)
Understanding of relational database technologies (e.g., SQL) and data storage principles
Knowledge of networking technologies and operating systems
Familiarity with data lifecycle management, data mapping, and inventory from a security control perspective
An understanding of the regulatory environment related to technology control requirements, with an emphasis on how security controls address global data protection regulations