Goldman Sachs details global compliance teams that manage regulatory risk

Goldman’s compliance job is bigger than rule-checking

Goldman Sachs is describing Global Compliance less like a back-office control and more like one of the firm’s operating systems. The function is responsible for managing compliance, regulatory, and reputational risk across every jurisdiction where the bank does business, which means it sits in the middle of product decisions, client work, audits, and responses when rules change.

That matters for employees because the role is not confined to saying no. Global Compliance advises businesses, manages audits and inquiries, educates employees on policies, and runs surveillance and testing on the firm’s risk-management infrastructure. In practical terms, that makes compliance a day-to-day partner in how Goldman moves money, launches products, and responds when regulators or internal reviewers start asking questions.

The real power sits in escalation and containment

The most useful way to read Goldman’s compliance setup is as a map of how the firm expects issues to move. A concern should not linger inside a business line until it becomes a headline, a regulatory inquiry, or a bonus-season distraction. It should move through compliance, through the Office of Regulatory Relations when needed, and into remediation before it creates larger exposure.

Goldman’s Office of Regulatory Relations adds another layer. It includes teams focused on implementation and execution, international regulatory relations, non-prudential regulatory engagement, regulatory remediation quality control, and US banking regulatory engagement. The function is built to protect the firm’s regulatory reputation by managing relationships with regulators and setting standards for those interactions, which tells employees that a sloppy answer, delayed response, or inconsistent document trail can matter as much as the underlying issue.

What this means for daily work at Goldman

For analysts, associates, VPs, and managing directors, the practical takeaway is simple: compliance is part of execution, not a check-the-box afterthought. If a deal, client pitch, transaction, or internal process touches a regulated activity, the question is not only whether it can get done, but how quickly it can be reviewed, documented, and defended if challenged.

That can affect product launches, client engagement timelines, and how quickly a business can respond when a rule changes. It also explains why compliance careers at Goldman tend to attract people who are comfortable translating between business urgency and control discipline. The firm says the group welcomes people from a wide range of academic and professional backgrounds, and that makes sense in a place where the job is often part policy interpretation, part stakeholder management, and part operational triage.

Aubrey’s path shows the kind of profile Goldman values

Goldman’s own employee profile from Wealth Management Compliance helps make that concrete. Aubrey, a managing director, said she studied finance at Rutgers University and was drawn to the intersection of law and finance. Her career path included work across regions, including Hong Kong, where better cross-regional communication and process streamlining were central to the job.

That is the kind of mobility compliance can offer inside a global bank. It is not a pure legal role, and it is not a pure commercial role. It is a hybrid seat with visibility across businesses and geographies, which can be attractive if you want a career that touches the firm’s biggest decisions without living entirely on the revenue side of the house.

The code update shows the standards are moving, too

Goldman’s Code of Business Conduct and Ethics was updated effective February 25, 2026, reflecting refinements in underlying policies and procedures, including responsible communication and fair treatment. That is more than housekeeping. When a firm updates its conduct code, it is effectively telling employees that the expectations around tone, judgment, and treatment of colleagues are being recalibrated along with the formal rules.

For employees, that means compliance is not just about market abuse, data handling, or reporting errors. It also reaches the softer, and often more contested, terrain of how people communicate, how managers treat teams, and how conduct issues are framed before they turn into internal disputes or external risk. In a bank where reputation and regulatory trust are inseparable, those details can carry career consequences.

Reporting channels are meant to be usable, not symbolic

Goldman’s Business Integrity Program gives employees and the public multiple ways to raise concerns anonymously or by name, through a third-party hotline or web form available 24 hours a day, seven days a week worldwide. The firm says retaliation for reporting possible violations of law, ethics, or firm policy is strictly prohibited.

That matters because many workplace problems do not start as dramatic violations. They start as patterns: a trading or reporting shortcut, a manager pushing too hard on a deadline, a client issue that feels off, or a policy exception that nobody wants to document. Goldman’s structure is built to encourage escalation before those problems harden into a disciplinary matter, a regulatory review, or a reputational hit.

Why the numbers make compliance impossible to ignore

Goldman’s own financial disclosures underline why the firm keeps this machinery so central. In 2025, the bank reported net revenues of $58.3 billion, up 9 percent year over year, and earnings per share of $51.32, up 27 percent. It also said it reduced historical principal investments by more than 90 percent, from about $64 billion to $6 billion, while lowering its stress capital buffer by a cumulative 320 basis points since 2020.

Those are not just balance-sheet facts. They show a firm that has become more capital-efficient, more exposed to regulatory interpretation, and more dependent on disciplined execution as it grows in areas such as private markets and capital-light businesses. The compliance burden rises when the business becomes more complex, more global, and more digitally driven.

Recent enforcement actions show the stakes in plain language

The danger is not theoretical. Goldman agreed to a $1.45 million fine over inaccurate reporting of stock trades after coding errors led to inaccurate reporting of 36.6 billion trades to the CAT Central Repository. That is the kind of number that should stop anyone who thinks surveillance and testing are administrative overhead.

A separate CFTC order in 2023 required Goldman Sachs & Co. LLC to pay a $30 million civil penalty over supervision and swap-data reporting failures. Together, the cases show how small process breakdowns can snowball into expensive, visible problems. For employees, the message is blunt: if something looks off, document it, escalate it, and do not assume the system will absorb the error quietly.

The bottom line for Goldman employees

Global Compliance is one of the clearest windows into how Goldman defines safe behavior and reputational risk. The firm is signaling that control functions are not there to slow the business for the sake of it. They are there to keep the business moving without creating the kind of regulatory or conduct problem that can damage careers, delay deals, or pull the firm into public scrutiny.

For people inside Goldman, that means the real skill is not memorizing policies. It is knowing when to surface an issue early, how to work across functions without losing speed, and how to keep a small problem from becoming a firm-wide one. In a place that prizes performance, that is often what separates routine execution from a headline.