About this roleYour teamThe Information Security Cyber Operations team is responsible for protecting BlackRock's business through effective cyber defense, risk management, and operational resilience. The team partners closely with internal stakeholders, auditors, regulators, and technology teams to maintain a strong cybersecurity control environment, support regulatory readiness, and continuously strengthen the firm's security posture. This role sits at the intersection of cyber operations, risk governance, and audit engagement management, providing critical leadership and oversight across a broad range of cybersecurity controls and initiatives.
Your role and impactAs a Director within Information Security, you will serve as a trusted risk advisor and primary liaison across audit, risk, regulatory, and governance activities impacting Cyber Operations. You will represent Security Operations during internal and external audit engagements, drive continuous improvement of the control framework, and provide leadership visibility into key cyber risks and remediation efforts. The role requires strong collaboration, risk management expertise, and the ability to communicate complex cybersecurity concepts to technical and non-technical stakeholders.
Your responsibilitiesIn every role at BlackRock, you'll be expected to apply sound judgement and critical thinking to solve complex problems, adapt as the business evolves, and combine the curiosity to explore new approaches and technologies with the rigor to challenge the results. The scope of this role also includes the following responsibilities:
- Serve as the primary Security Operations subject matter expert supporting internal audits, external audits, regulatory reviews, and risk assessments.
- Lead coordination of audit and risk engagements across Information Security, partnering with audit stakeholders and technical subject matter experts.
- Manage audit evidence requests and validate responses for technical accuracy, completeness, consistency, and alignment with control requirements.
- Maintain comprehensive knowledge of Security Operations platforms, controls, architectures, configurations, and associated documentation to support audit readiness.
- Partner with Security Operations stakeholders to identify control enhancement opportunities and strengthen the overall cybersecurity control environment.
- Provide leadership visibility into audit activity, emerging risks, and remediation efforts while overseeing cyber incident post-mortem reviews and action tracking.
Your experience- Demonstrated ability to lead complex technology, governance, risk management, or audit initiatives with strong documentation and process management skills.
- Strong stakeholder management and communication skills, including the ability to influence outcomes and communicate complex technical concepts to diverse audiences.
- Ability to identify cybersecurity risks, assess control effectiveness, and develop practical risk mitigation strategies.
- Proven ability to prioritize competing demands, manage multiple workstreams, and operate effectively in dynamic and fast-paced environments.
- Ability to drive continuous improvement and collaborate successfully across global teams and stakeholder groups.
- Bachelor's degree in Information Systems, Computer Science, Information Security, or a related field.
- Demonstrated success in Information Security, IT Risk, IT Governance, or IT Audit within financial services environments; CISSP, CISM, and/or CISA certifications preferred.
For New York, NY Only the salary range for this position is USD$215,000.00 - USD$275,000.00 . Additionally, employees are eligible for an annual discretionary bonus, and benefits including healthcare, leave benefits, and retirement benefits. BlackRock operates a pay-for-performance compensation philosophy and your total compensation may vary based on role, location, and firm, department and individual performance.
Our benefitsTo help you stay energized, engaged and inspired, we offer a wide range of benefits including a strong retirement plan, tuition reimbursement, comprehensive healthcare, support for working parents and Flexible Time Off (FTO) so you can relax, recharge and be there for the people you care about.
Our hybrid work modelBlackRock's hybrid work model is designed to enable a culture of collaboration and apprenticeship that enriches the experience of our employees, while supporting flexibility for all. Employees are currently required to work at least 4 days in the office per week, with the flexibility to work from home 1 day a week. Some business groups may require more time in the office due to their roles and responsibilities. We remain focused on increasing the impactful moments that arise when we work together in person - aligned with our commitment to performance and innovation. As a new joiner, you can count on this hybrid model to accelerate your learning and onboarding experience here at BlackRock.
Guidance on AI use for candidatesAt BlackRock, AI has long been part of how we work - enhancing decision-making, improving operations, and helping us deliver better outcomes for clients. We encourage candidates to use AI thoughtfully to learn, prepare, and work more effectively; but during our interview process, we want to focus on getting to know you through your own experiences, thinking, and judgment. To support you, we've provided
guidance on when and how to use AI during our hiring process so you can approach each step with confidence and showcase your best self.
