Enterprise Technology RISK & CONTROLS: GOVERNANCE LEAD, Director - NY

About this role

Business Overview: 

At BlackRock, the Enterprise Technology Risk & Controls team stands as a crucial component within the first line of defense, embodying a proactive and collaborative spirit. This dynamic team works in close partnership with Internal Audit, Risk & Quantitative Analysis, Information Security, and Engineering teams, ensuring a unified and comprehensive approach to risk management and control.  The team’s mission is realized through four distinct yet interconnected operating pillars:Risk Advisory, Assessment & Reporting, Technology Control Standards, and Risk Governance.  Through these pillars, the Enterprise Technology Risk & Controls team not only safeguards BlackRock’s technological landscape but also drives continuous improvement and resilience across the organization. 

Role Description 

Join us and play a pivotal role in shaping the future of BlackRock’s technology risk management strategy. Our Enterprise Technology Risk & Controls team collaborates closely with senior leaders and subject matter experts to engage with regulators, senior stakeholders, and risk committees, driving the firm’s technology risk management standards forward.  In this role, you will lead our Technology Risk Governance function, where you will be responsible for establishing consistent governance practices to manage long-term program strategy and growth. Your remit will include spearheading enhancements to our technology risk policies and standards, engaging with regulators, establishing training and awareness programs, and developing committee level content. 

Key responsibilities: 

Lead Technology Risk Governance under the Enterprise Technology Risk & Controls program within the first line of defense, including: 

• Policies and Standards: Establish industry standard design principles for technology policies and standards, and lead a program of work to uplift the firm’s documentation in line with new expectations 

• Training and Awareness: Establish and implement a technology risk training and awareness program targeted towards the firm’s technology risk managers, technology leaders, and individuals who directly manage software or other technology 

• Regulator Engagement: Lead first line of defense engagement with regulators including ongoing supervision, as well on exams and inquiries. 

• Board and Committee Level Content:  Lead the development of technology risk related content for the BlackRock Board of Directores, Internal Risk Committees, and senior leaders. 

Desired Qualifications: 

Technology Risk Governance Leadership Experience: Experience leading technology risk governance activities, including policy development & management, and risk training & awareness. 

Technology Operational Risk Expertise: Subject matter expert in technology operational risk, with deep understanding of policy design and regulatory and industry standards for technology controls. 

Executive Level Written Communication Skills: Experience developing memos and presentations to be consumed by the firm’s regulators, Board of Directors, risk management committees