Associate, Technology Audit

The Technology Audit Associate will serve as a senior information technology auditor and be responsible for assessing the effectiveness of technology controls. This role includes technology-led audits across all aspects of information technology including cybersecurity, infrastructure, messaging, network, software and cloud, as well as business-integrated audits in which there is close interaction between business and technology partners.

Through both conceptual and hands-on means, the Technology Audit Associate will provide clear illustrations of how different technologies and related processes deliver against the firm’s business strategy.

Internal Audit’s primary mission is to provide independent assurance to the Board of Directors and Executive Management regarding the management of BlackRock’s businesses. The team engages with senior leaders and all of BlackRock’s individual business units globally to understand and advise on the risks in their business, evaluate the effectiveness of key processes and assist in the design of best practices that can improve their results. Internal Audit reports directly to the Audit Committee of the Board of Directors, and our work builds confidence that BlackRock will meet its obligations to clients, shareholders, employees and other stakeholders.

The Technology Audit Associate will be responsible for reviewing, testing and assessing the effectiveness of technology controls in business-integrated audits in which there is close interaction between business and technology partners. This role also includes technology-led audits across all aspects of information technology including cybersecurity, software, hardware, database, messaging, network and cloud.

Through both conceptual and hands-on means, the Technology Audit Associate will provide clear illustrations of how different technologies and related processes function within their business context to support and deliver against the firm’s business agenda.

Specific responsibilities will include:

• Management and timely execution of audits.
• Engaging BlackRock stakeholders to understand and identify key processes and risks within a specific business unit.
• Making risk-based decisions on audit scope.
• Designing and executing test plans to validate controls.
• Investigating, escalating and vetting issues identified during testing.
• Drafting audit reports and issue details.
• Discussing observations and remediation activities with senior stakeholders.
• Providing advisory services during the development or acquisition of new businesses and systems.
• Identifying emerging firm-wide and business risks, understanding organizational changes through periodic engagements with business units, and completing risk assessments of these areas.
• Building collaborative relationships with the risk and control functions.
• Leading or contributing to global department-wide initiatives.

Skills and Experience:

• Undergraduate or graduate degree in management information systems, engineering, technology, computer science or a related field is preferred. BA/BS or equivalent is required.
• At least 5 years in a technology audit and/or technology risk management function, preferably within the wealth management/asset management/banking industry.
• Relevant professional certifications are a plus (e.g., CISA, CISM, CRISC, CEH).
• Strong understanding of application development, databases, operating systems, networking and other key technology infrastructure components.
• Knowledge of technology controls including: application security management, system architecture and design, technology operations, and technology governance.
• Interest in broad exposure to investment management, sales, trading, operations, risk management, finance, legal, and compliance activities in the asset management industry.
• Familiarity with financial instruments and asset management processes.
• Proficient understanding of current regulatory and industry events.
• Strong project management, organizational, and presentation skills.
• Excellent communication (verbal, written, listening) and interpersonal skills, including strong writing skills.
• Ability to develop and maintain effective relationships with peers and business partners.
• Intellectual curiosity and healthy skepticism.
• Strong critical thinking and problem-solving skills.
• Commitment and strong work ethic.