Description
About this role
Overview
Join our global team of cyber security experts, protecting our business and developing exciting capabilities on the frontline of cyber defense. The Cybersecurity Engagement team acts as a liaison with Regulators, Boards and Committees, oversees the lifecycle of cybersecurity controls owned by the Information Security team, and acts as a trusted risk advisor for the Information Security department. We are looking for a person with 5+ years of Information Security and IT Risk experience, performing risk advisory oversight for large Financial Services firms, or 4+ years in a related consulting role. This role will be responsible for maintaining and testing cybersecurity controls owned by the Information Security team and influencing the management of security risks across the organization
- Develop and maintain a framework with key cybersecurity controls and evidence owned by the Information Security personnel.
- Maintain a list of global cybersecurity requirements that need to be evaluated for alignment or compliance (testing).
- Engage with global SMEs to update and maintain the control/evidence framework, and to develop test steps.
- Facilitate testing of control design and effectiveness.
- Identify potential areas of improvements.
- Perform and document compliance assessments against selected global regulations using the framework.
- Create and enhance presentations for senior and executive management, clients and regulators. Maintain a global resource with all regional presentations to boards, committees and regulators.
- Support regulatory developments, including monitoring new regulations, preparing actions for new regulatory requirements, presentations, meetings, note-taking, summary reports to management.
- Evaluate third party assessments of the Information Security function.
- Support the metrics program.
- Propose updates to cybersecurity policies and standards.
- Engage in process/control improvements of the Information Security, in any area where enhancements are needed or appropriate.
BlackRock is committed to building great Cyber Security careers for our people, and we are looking for an individual with a passion for cyber security defense to continue the growth of our exceptional team.
What the ideal candidate looks like
- Strong documentation and process-oriented background with leading and managing complex Technology projects.
- Ability to effectively influence others to account for the plans and collaborative behaviors for results.
- Ability to communicate complex and technical issues to diverse audiences, orally and in writing, in an easily understood, authoritative, and actionable manner.
- Ability to identify and assesses the cybersecurity threats, risks and controls to cost-effectively mitigate risks.
- Strong decision-making abilities.
- Ability to react to high pressure dynamic changing environments.
- Excellent prioritization capabilities, with an aptitude for breaking down work into manageable parts, effectively assessing the priority and time required to complete each part.
- Ability to work on several tasks simultaneously and pay attention to sources of information from inside and outside one's network within an organization.
- Ability to apply original and innovative thinking to produce new ideas and create innovative products, solutions, or approaches.
- A discipline and interpersonal skills to work well in a global environment, complementing teams in multiple remote locations.
Candidates will be evaluated primarily upon their ability to demonstrate the competencies required to be successful in the role, as described above. For reference, the typical work experience and educational background of candidates in this roleare as follows
- BS in MIS, Computer Science, Information Security, or a related field
- 5+ years in IT Risk or IT Governance or IT Audit role in a financial services company, or as manager in Information Security in a financial services company,
- Or 4+ years of related consulting in a large consulting company,
- Or 6+ years of work experience as an accomplished Information Technologist and Technology Risk Management practitioner.
- 3+ years of experience with information security management frameworks (e.g., CRI, CAT, NIST, ISO, CSI, etc.)
- Certified Information Systems Security Professional (CISSP), Certified Information SecurityManager (CISM), and/or Certified Information Systems Auditor (CISA) preferred.
Our benefits
To help you stay energized, engaged and inspired, we offer a wide range of benefits including a strong retirement plan, tuition reimbursement, comprehensive healthcare, support for working parents and Flexible Time Off (FTO) so you can relax, recharge and be there for the people you care about.
Our hybrid work model
BlackRock's hybrid work model is designed to enable a culture of collaboration and apprenticeship that enriches the experience of our employees, while supporting flexibility for all. Employees are currently required to work at least 4 days in the office per week, with the flexibility to work from home 1 day a week. Some business groups may require more time in the office due to their roles and responsibilities. We remain focused on increasing the impactful moments that arise when we work together in person aligned with our commitment to performance and innovation. As a new joiner, you can count on this hybrid model to accelerate your learning and onboarding experience here at BlackRock.
About BlackRock
At BlackRock, we are all connected by one mission to help more and more people experience financial well-being. Our clients, and the people they serve, are saving for retirement, paying for their children's educations, buying homes and starting businesses. Their investments also help to strengthen the global economy support businesses small and large finance infrastructure projects that connect and power cities and facilitate innovations that drive progress.
This mission would not be possible without our smartest investment the one we make in our employees. It's why we're dedicated to creating an environment where our colleagues feel welcomed, valued and supported with networks, benefits and development opportunities to help them thrive.
For additional information on BlackRock, please visit
www.linkedin.com/company/blackrock
BlackRock is proud to be an Equal Opportunity Employer. We evaluate qualified applicants without regard to age, disability, family status, gender identity, race, religion, sex, sexual orientation and other protected attributes at law.
Job requisition #
R241223