Associate Software Engineer

At Moody's, we unite the brightest minds to turn today’s risks into tomorrow’s opportunities. We do this by striving to create an inclusive environment where everyone feels welcome to be who they are—with the freedom to exchange ideas, think innovatively, and listen to each other and customers in meaningful ways. Moody’s is transforming how the world sees risk.

As a global leader in ratings and integrated risk assessment, we’re advancing AI to move from insight to action—enabling intelligence that not only understands complexity but responds to it. We decode risk to unlock opportunity, helping our clients navigate uncertainty with clarity, speed, and confidence.

If you are excited about this opportunity but do not meet every single requirement, please apply! You still may be a great fit for this role or other open roles. We are seeking candidates who model our values: invest in every relationship, lead with curiosity, champion diverse perspectives, turn inputs into actions, and uphold trust through integrity.

Skills and Competencies* 3–6 years of experience in technology risk, IT controls, technical audit support, software engineering, infrastructure engineering, cybersecurity governance, or a closely related discipline

• Experience drafting risk assessments, evaluating inherent and residual risk, documenting control design and operating effectiveness, and presenting evidence-based assessments for second-line review and challenge
• Strong working knowledge of ICT Risk Management standards and the ability to translate requirements into practical controls, documented procedures, and evidence expectations across lines of business
• Ability to understand application architecture, cloud and infrastructure services, identity and access management, software development lifecycles, change management, logging and monitoring, vulnerability management, and technology resilience
• Practical experience using a scripting language such as Python or PowerShell, SQL, APIs, and version control to analyze evidence, validate control execution, or automate repeatable documentation and monitoring activities
• Demonstrated ability to produce clear, accurate standard operating procedures, control narratives, process flows, technical assessments, and audit-ready evidence packages
• Ability to explain technical risks to both technical and nontechnical audiences, constructively defend assessments, resolve review comments, and escalate unresolved issues through established governance channels
• Demonstrated proficiency in artificial intelligence concepts, with hands-on experience using AI tools to streamline workflows and enhance operational efficiency. Proven ability to implement AI-powered solutions to solve business challenges. Demonstrates a growing awareness of AI risk management and a commitment to responsible and ethical AI use
• Preferred: Experience with governance, risk, and compliance platforms, workflow tools, and document repositories; relevant technology, cloud, cybersecurity, or risk certifications are beneficial

Education* Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related discipline, or equivalent practical experience

Responsibilities

The Associate Software Engineer supports IT risk management, technical controls, and operational governance across Moody's lines of business by combining hands-on technical analysis with strong risk assessment and documentation capabilities.* Draft, update, and maintain Risk and Control Self-Assessments for technology processes and services, including risk statements, inherent and residual risk assessments, control mappings, supporting rationale, and identified gaps

• Present and defend assessments during second-line risk review and challenge using traceable technical evidence; document challenge outcomes, resolve comments, and escalate material disagreements through established governance channels
• Write, update, and maintain technical standard operating procedures and a governed inventory, including ownership, version history, approval status, review dates, and links to applicable risks and controls
• Translate technical workflows into clear, executable procedures with defined responsibilities, evidence requirements, exception handling, and escalation paths
• Assess lines of business processes and technical practices against the ICT Risk Management Standard, identifying gaps, inconsistencies, and opportunities to strengthen control implementation
• Support internal and external technology audits by preparing technical documentation, coordinating evidence requests, and participating in system and control walkthroughs
• Use approved AI tools extensively to draft and revise assessments, standard operating procedures, control narratives, technical summaries, and audit responses, while retaining accountability for accuracy and completeness
• Build or maintain lightweight scripts and automated workflows that improve inventory accuracy, evidence collection, documentation quality, and control monitoring
• Validate AI-generated outputs, protect sensitive information, and ensure risk decisions, control approvals, exceptions, and enforcement actions remain subject to authorized human review

About the Team

Our team works across technology groups, lines of business, control owners, second-line risk management, and audit functions to strengthen technology risk management across Moody's. We are committed to combining engineering skills, responsible AI adoption, and disciplined risk practices to make technical controls and documentation more accurate, consistent, and sustainable.

By joining the team, you will have the opportunity to contribute to meaningful work that directly supports Moody's operational resilience and governance objectives in a collaborative, innovation-forward environment.

For US-based roles only: the anticipated hiring base salary range for this position is $78,300.00 - $113,550.00, depending on factors such as experience, education, level, skills, and location. This range is based on a full-time position. In addition to base salary, this role is eligible for incentive compensation.

Moody’s also offers a competitive benefits package, including not but limited to medical, dental, vision, parental leave, paid time off, a 401(k) plan with employee and company contribution opportunities, life, disability, and accident insurance, a discounted employee stock purchase plan, and tuition reimbursement.

Moody’s is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, sex, gender, age, religion or creed, national origin, ancestry, citizenship, marital or familial status, sexual orientation, gender identity, gender expression, genetic information, physical or mental disability, military or veteran status, or any other characteristic protected by law.

Moody’s also provides reasonable accommodation to qualified individuals with disabilities or based on a sincerely held religious belief in accordance with applicable laws. If you need to inquire about a reasonable accommodation, or need assistance with completing the application process, please email [email protected].

This contact information is for accommodation requests only, and cannot be used to inquire about the status of applications

For San Francisco positions, qualified applicants with criminal histories will be considered for employment consistent with the requirements of the San Francisco Fair Chance Ordinance.

This position may be considered a promotional opportunity, pursuant to the Colorado Equal Pay for Equal Work Act.

Click here to view our full EEO policy statement. Click here for more information on your EEO rights under the law. Click here to view our Pay Transparency Nondiscrimination statement.

Candidates for Moody's Corporation may be asked to disclose securities holdings pursuant to Moody’s Policy for Securities Trading and the requirements of the position. Employment is contingent upon compliance with the Policy, including remediation of positions in those holdings as necessary.