Director, Technology Risk Management

About this role

Title: Director, Operational Risk - Technology and Cybersecurity Risk Management (NYC)

We are looking for an experienced individual to join the Technology Risk team based in New York.

Job Description

BlackRock is one of the world’s preeminent asset management firms and a leading provider of investment management, risk management, and advisory services to diverse investors globally. BlackRock offers our clients a range of solutions, from rigorous fundamental and quantitative active management strategies to highly efficient index strategies for broad exposure to the world’s capital markets. Our clients access our investment solutions through a variety of products, including individual and institutional separate accounts, mutual funds, other pooled investment vehicles, and the industry-leading iShares® ETFs.

Business Overview

Understanding and managing risk is the cornerstone of BlackRock’s approach to responsible investing.  BlackRock’s Risk & Quantitative Analysis (RQA) group’s mission is to advance the firm’s risk management practices and to deliver independent risk expertise and constructive challenge to drive better business and investment outcomes.  RQA promotes BlackRock as a leader in risk management by providing independent top-down and bottom-up oversight to help identify investment, counterparty, operational, regulatory, technology, and third-party risks.

RQA is committed to investing in our people to increase both individual enablement and a strong collaborative environment. As a global group located all around the world, our goal is to create a culture of inclusion which encourages teamwork, innovation, diversity and the development our future leaders.  We actively engage in discussions on career growth and work with team members to understand how personal passions and strengths connect with our purpose.

Technology Risk Management

Technology Risk Management (TRM) is an integral part of the RQA Enterprise Risk Management group. As a second line of defense function, our mission is to help ensure senior management has defined technology controls that protect our clients, our firm and support the achievement of firm-wide business goals within our risk tolerance. TRM partners with senior management, Aladdin Product Group and Technology leadership, Information Security, Operational Risk and other control functions to achieve this mission.

The ideal candidate for this position must be a dynamic, flexible and creative leader, with experience in technology and enterprise risk management and financial services. The candidate must have strong presentation, communication, stakeholder management and proven leadership skills in order to successfully navigate across different levels of the BLK and client organizations. The candidate must also be able to work cross functionally across enterprise risk disciplines. 

Key Responsibilities:

• Help lead the global second-line Technology and Cybersecurity Risk management organization with strategic direction, including setting vision for the Technology Risk Management framework across the three lines of defense.
• Represent second-line Technology and Cybersecurity Risk organization across multiple BlackRock regulated entities, including ongoing regulatory engagement, targeted exams, senior management and board-level interactions.
• Collaborate closely with senior technology leadership, including the heads of Aladdin Engineering, Technology, Internal Audit, the CISO, and other executives to integrate risk management into business processes.
• Establish and oversee the application of operational risk policies, technology and tools, and governance processes to create lasting solutions for minimizing losses from failed internal processes, inadequate controls, and emerging risks.
• Leverage strong technical and interpersonal skills to successfully partner with technologists and software owners to identify potential concentrations of elevated risk and perform independent assessments of mitigating controls.
• Provide thought leadership to drive strategic risk reduction efforts for technology and cybersecurity related matters through proactive risk identification, analysis and response.
• Spearhead corporate enterprise risk initiatives and processes that have a technology component. Contribute to the development of the Enterprise Risk Management (ERM) program as part of the ERM leadership team and represent Technology Risk in formal risk governance. (e.g., boards, risk committees, steering groups)
• Set direction and provide strategic oversight of periodic and thematic risk assessments to execute continuous control monitoring; detail potential control gaps and questions,