Internal Audit – Technology Audit Assistant Vice President (AVP) – New York

Blackstone is the world’s largest alternative asset manager. We seek to create positive economic impact and long-term value for our investors, the companies we invest in, and the communities in which we work. We do this by using extraordinary people and flexible capital to help companies solve problems. Our $1.1 trillion in assets under management include investment vehicles focused on private equity, real estate, public debt and equity, infrastructure, life sciences, growth equity, opportunistic, non-investment grade credit, real assets and secondary funds, all on a global basis. Further information is available at www.blackstone.com. Follow @blackstone on LinkedIn, Twitter, and Instagram.
 

Position Title

Internal Audit – Technology Audit Assistant Vice President (AVP) – New York

Job Description

Blackstone Internal Audit (BXIA) provides independent assurance to executive management and the Blackstone Audit Committee on the effectiveness of the Firm’s governance, risk management, and internal control processes. The Internal Audit AVP will be involved in the core activities undertaken by BXIA, audit planning and execution, annual risk assessments, SOX assurance, advisory activities, and contributing to department wide strategic initiatives. While primarily focused on technology risk, the role will offer exposure to other key areas, including investment and asset management, risk management, operations, finance, and compliance. Specific responsibilities will include, but are not limited to:

• Assist in the execution of the global audit risk assessment and planning processes across Blackstone’s technology environment
• Develop technology audit work programs to support the annual Audit Plan
• Leverage industry experience to provide technology risk subject matter expertise for audit and advisory engagements
• Perform risk-based technology audits and reviews of systems, applications, infrastructure (including cloud) and IT processes across Blackstone’s global businesses, products, regions, and enterprise functions
• Support integrated business audits by providing IT technology expertise to operational auditors and completing technical aspects of testing
• Identify and evaluate key controls (e.g., SOPs, ITGCs, application and infrastructure controls) including performing testing for design and operating effectiveness, documentation of test results, identification of findings as applicable, and development of corrective actions or operational enhancement opportunities that mitigate risk, drive efficiency, and add value
• Meet with key technology and business stakeholders to gain an understanding of their respective operating and risk environments, and independently assess risk across key processes supporting those environments
• Find opportunities to drive audit process efficiency with existing technical infrastructure through automation while embracing innovative opportunities offered by new technologies, including leveraging data analytics
• Participate in and/or lead firm and department initiatives
• Stay up to date with evolving industry / technology trends, external news, and regulatory changes; analyze the impact to the business and technology operating environment
• Promote innovative business practices

Qualifications    

BXIA seeks to attract and develop best-in-class talent from diverse professional backgrounds including finance, technology, risk management, operations, and compliance. Successful professionals should demonstrate a strong understanding of the asset management business and its technologies, and a history of cultivating strong working relationships with business partners through the delivery of impactful services focused on strengthening the risk and control environment. The relative small size of this group offers an opportunity to gain significant exposure across the Blackstone platform.

• CISA qualification with 7+ years of IT Governance/IT Audit experience with Big Four or an internal audit function within the financial services industry
• Experience in critical technology domains including infrastructure (networks, databases and Windows/Unix operating systems), cyber security, ITSM practices, data analytics, applications (ERP