Audit Risk Management Director, Cyber Operations - New York

Your team

The Information Security Cyber Operations team is responsible for protecting BlackRock’s business through effective cyber defense, risk management, and operational resilience. The team partners closely with internal stakeholders, auditors, regulators, and technology teams to maintain a strong cybersecurity control environment, support regulatory readiness, and continuously strengthen the firm’s security posture. This role sits at the intersection of cyber operations, risk governance, and audit engagement management, providing critical leadership and oversight across a broad range of cybersecurity controls and initiatives.

Your role and impact

As a Director within Information Security, you will serve as a trusted risk advisor and primary liaison across audit, risk, regulatory, and governance activities impacting Cyber Operations. You will represent Security Operations during internal and external audit engagements, drive continuous improvement of the control framework, and provide leadership visibility into key cyber risks and remediation efforts. The role requires strong collaboration, risk management expertise, and the ability to communicate complex cybersecurity concepts to technical and non-technical stakeholders.

Your responsibilities

In every role at BlackRock, you'll be expected to apply sound judgement and critical thinking to solve complex problems, adapt as the business evolves, and combine the curiosity to explore new approaches and technologies with the rigor to challenge the results. The scope of this role also includes the following responsibilities:

• Serve as the primary Security Operations subject matter expert supporting internal audits, external audits, regulatory reviews, and risk assessments.

• Lead coordination of audit and risk engagements across Information Security, partnering with audit stakeholders and technical subject matter experts.

• Manage audit evidence requests and validate responses for technical accuracy, completeness, consistency, and alignment with control requirements.

• Maintain comprehensive knowledge of Security Operations platforms, controls, architectures, configurations, and associated documentation to support audit readiness.

• Partner with Security Operations stakeholders to identify control enhancement opportunities and strengthen the overall cybersecurity control environment.

• Provide leadership visibility into audit activity, emerging risks, and remediation efforts while overseeing cyber incident post-mortem reviews and action tracking.

Your experience

• Demonstrated ability to lead complex technology, governance, risk management, or audit initiatives with strong documentation and process management skills.

• Strong stakeholder management and communication skills, including the ability to influence outcomes and communicate complex technical concepts to diverse audiences.

• Ability to identify cybersecurity risks, assess control effectiveness, and develop practical risk mitigation strategies.

• Proven ability to prioritize competing demands, manage multiple workstreams, and operate effectively in dynamic and fast-paced environments.

• Ability to drive continuous improvement and collaborate successfully across global teams and stakeholder groups.

• Bachelor's degree in Information Systems, Computer Science, Information Security, or a related field.

• Demonstrated success in Information Security, IT Risk, IT Governance, or IT Audit within financial services environments; CISSP, CISM, and/or CISA certifications preferred.