Director, Enterprise Tech Risk and Controls

About this role

At BlackRock, the Enterprise Technology Risk & Controls team stands as a crucial component within the first line of defense, embodying a proactive and collaborative spirit. This dynamic team works in close partnership with Internal Audit, Risk & Quantitative Analysis, Information Security, and Engineering teams, ensuring a unified and comprehensive approach to risk management and control.  The team’s mission is realized through four distinct yet interconnected operating pillars:Risk Advisory, Assessment & Reporting, Technology Control Standards, and Risk Governance.  Through these pillars, the Enterprise Technology Risk & Controls team not only safeguards BlackRock’s technological landscape but also drives continuous improvement and resilience across the organization.

 

 

Role Description

 

Join us and play a pivotal role in shaping the future of BlackRock’s technology risk management strategy. Our Enterprise Technology Risk & Controls team collaborates closely with senior leaders and subject matter experts to engage with regulators, senior stakeholders, and risk committees, driving the firm’s technology risk management standards forward.  In this role, you will be a risk member of the Technology Control Standards function, where you will be responsible for ensuring alignment with organizational technology standards for acquisitions, developing and reporting risk management metrics including enterprise risk indicators, and establishing and managing a centralized Technology Risk Register for core technology and emerging risks, in addition to identifying and governing risk mitigation activities across the organization as appropriate. 

 

 

Key Responsibilities

 

• Lead the development and ongoing enhancement of an Enterprise Risk Indicator (ERI) framework to measure technology risk exposure.

• Define and maintain key risk metrics, thresholds, and escalation criteria aligned with internal governance standards.

• Integrate ERIs into dashboards, reporting, and governance forums to support proactive risk management and executive oversight.

• Present technology risk insights and recommendations to senior leadership and executive committees.

• Lead the evolution of the firm’s technology risk strategy for mergers and acquisitions, including due diligence and post‑integration governance.

• Develop standardized technology due diligence templates, integration checklists, and risk assessment processes.

• Assess technology maturity, and policy compliance of acquisition targets.

• Establish and govern a centralized Technology Risk Register covering core, emerging, and interconnected risks.

 

 

Desired Qualifications

 

• Technology Assessment Experience: 5+ years of experience in technology risk management, IT audit, cybersecurity, or a related field.

• Risk Frameworks and Standards: In-depth knowledge of NIST CSF, ISO 27001, COBIT, SOX, and other relevant regulations.

• IT Infrastrucuture, and SDLC: Understanding of key IT domains (SDLC, networks, operating systems, cloud platforms, encryption, identity & access management) and how they factor into risk assessments.

• Analytics & Reporting: Skilled in indentifing trends, measuring control effectiveness, and presenting actionable insights.

• Project & Program Management: Ability to oversee multiple, concurrent projects, including scope management, resource planning, and risk mitigation strategies.

• Collaboration & Relationship-Building: Proven ability to partner with diverse teams (technical and non-technical), cultivating a culture of shared accountability for risk management.

• Problem-solving: Structured critical thinker with superior problem-solving abilities who can organize people under pressure and pull in key decision-makers to prioritize issues.

• Intellectual Curiosity:  Strong grasp of content, business models, interest in Technology, markets, and geopolitical trends.

• Demonstrates integrity and the highest standards, with a commitment to inclusion and diversity.

• 5+ years of experience in asset management, financial services or technology in a technology operational risk-related role

• CISA or CRISC certification preferred.

For New York, NY Only the salary range for this position is USD$194,000.00 - USD$270,000.00 . Additionally, employees are eligible for an annual discretionary bonus, and benefits including healthcare, leave benefits, and retirement benefits. BlackRock operates a pay-for-performance compensation philosophy and your total compensation may vary based on role, location, and firm, department and individual performance.

Our benefits
To help you stay energized, engaged and inspired, we offer a wide range of benefits including a strong retirement plan, tuition reimbursement, comprehensive healthcare, support for working parents and Flexible Time Off (FTO) so you can relax, recharge and be there for the people you care about.

Our hybrid work model

BlackRock’s hybrid work model is designed to enable a culture of collaboration and apprenticeship that enriches the experience of our employees, while supporting flexibility for all. Employees are currently required to work at least 4 days in the office per week, with the flexibility to work from home 1 day a week. Some business groups may require more time in the office due to their roles and responsibilities. We remain focused on increasing the impactful moments that arise when we work together in person – aligned with our commitment to performance and innovation. As a new joiner, you can count on this hybrid model to accelerate your learning and onboarding experience here at BlackRock.

About BlackRock

At BlackRock, we are all connected by one mission: to help more and more people experience financial well-being.  Our clients, and the people they serve, are saving for retirement, paying for their children’s educations, buying homes and starting businesses. Their investments also help to strengthen the global economy: support businesses small and large; finance infrastructure projects that connect and power cities; and facilitate innovations that drive progress.

This mission would not be possible without our smartest investment – the one we make in our employees. It’s why we’re dedicated to creating an environment where our colleagues feel welcomed, valued and supported with networks, benefits and development opportunities to help them thrive.

For additional information on BlackRock, please visit @blackrock | Twitter: @blackrock | LinkedIn: www.linkedin.com/company/blackrock

BlackRock is proud to be an equal opportunity workplace. We are committed to equal employment opportunity to all applicants and existing employees, and we evaluate qualified applicants without regard to race, creed, color, national origin, sex (including pregnancy and gender identity/expression), sexual orientation, age, ancestry, physical or mental disability, marital status, political affiliation, religion, citizenship status, genetic information, veteran status, or any other basis protected under applicable federal, state, or local law. View the EEOC’s Know Your Rights poster and its supplement and the pay transparency statement.

 

BlackRock is committed to full inclusion of all qualified individuals and to providing reasonable accommodations or job modifications for individuals with disabilities. If reasonable accommodation/adjustments are needed throughout the employment process, please email [email protected]. All requests are treated in line with our privacy policy.

BlackRock will consider for employment qualified applicants with arrest or conviction records in a manner consistent with the requirements of the law, including any applicable fair chance law.