Veterans Transition Program- Associate, Cyber Security Regulatory Support

BlackRock•Wilmington, DE

3d•$110,000 - $138,000•Onsite

About The Position

Veterans Transition Program- Associate, Cyber Security Regulatory Support. We recognize that veterans bring a unique and valued perspective to BlackRock thanks to their extraordinary backgrounds and experiences. The Veterans Transition Program is designed to support veterans in making the transition from military life to the civilian workforce. The Program offers participants the opportunity to work at the world’s largest asset manager for six months. On completion of the Program, successful participants will be offered permanent employment at BlackRock. Over the course of the Program, participants will: Join teams and have an immediate impact; Immerse themselves in the work of their teams; Gain an understanding of how BlackRock serves its clients; Be supported through training and mentorship; Get exposure to senior leaders; Participate in social and networking opportunities. Program Structure: The program begins with an orientation where you’ll learn about BlackRock’s principles, mission, purpose, and culture. You’ll learn about the asset management industry and get an in-depth look at how BlackRock serves its clients. Following orientation, you’ll join your team and gain insights into the day-to-day life of an Associate as you develop subject-matter expertise through on-the-job learning and our industry-leading technology, Aladdin. Overview Join our global team of cyber security experts, protecting our business and developing exciting capabilities on the frontline of cyber defense. The Cyber Governance team acts as a liaison with Regulators, Boards and Committees, oversees the lifecycle of cybersecurity controls owned by the Information Security team, and acts as a trusted risk advisor for the Information Security department. We are looking for a person with 5+ years of Information Security and IT Risk experience, performing risk advisory oversight for large Financial Services firms, or 4+ years in a related consulting role. This role will be responsible for maintaining and testing cybersecurity controls owned by the Information Security team and influencing the management of security risks across the organization: Develop and maintain a framework with key cybersecurity controls and evidence owned by the Information Security personnel. Maintain a list of global cybersecurity requirements that need to be evaluated for alignment or compliance (testing). Engage with global SMEs to update and maintain the control/evidence framework, and to develop test steps. Facilitate testing of control design and effectiveness. Identify potential areas of improvements. Perform and document compliance assessments against selected global regulations using the framework. Create and enhance presentations for senior and executive management, clients and regulators. Maintain a global resource with all regional presentations to boards, committees and regulators. Support regulatory developments, including monitoring new regulations, preparing actions for new regulatory requirements, presentations, meetings, note-taking, summary reports to management. Evaluate third party assessments of the Information Security function. Support the metrics program. Propose updates to cybersecurity policies and standards. Engage in process/control improvements of the Information Security, in any area where enhancements are needed or appropriate. BlackRock is committed to building great Cyber Security careers for our people, and we are looking for an individual with a passion for cyber security defense to continue the growth of our exceptional team.

Requirements

5+ years of Information Security and IT Risk experience, performing risk advisory oversight for large Financial Services firms, or 4+ years in a related consulting role.
Strong documentation and process-oriented background with leading and managing complex Technology projects.
Ability to effectively influence others to account for the plans and collaborative behaviors for results.
Ability to communicate complex and technical issues to diverse audiences, orally and in writing, in an easily understood, authoritative, and actionable manner.
Ability to identify and assess cybersecurity threats, risks and controls to cost-effectively mitigate risks.
Strong decision-making abilities.
Ability to react to high pressure dynamic changing environments.
Excellent prioritization capabilities, with an aptitude for breaking down work into manageable parts, effectively assessing the priority and time required to complete each part.
Ability to work on several tasks simultaneously and pay attention to sources of information from inside and outside one’s network within an organization.
Ability to apply original and innovative thinking to produce new ideas and create innovative products, solutions, or approaches.
A discipline and interpersonal skills to work well in a global environment, complementing teams in multiple remote locations.
BS in MIS, Computer Science, Information Security, or a related field
5+ years in IT Risk or IT Governance or IT Audit role in a financial services company, or as manager in Information Security in a financial services company, Or 4+ years of related consulting in a large consulting company, Or 6+ years of work experience as an accomplished Information Technologist and Technology Risk Management practitioner.
3+ years of experience with information security management frameworks (e.g., CRI, CAT, NIST, ISO, CSI, etc.)

Nice To Haves

Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), and/or Certified Information Systems Auditor (CISA) preferred.

Responsibilities

Develop and maintain a framework with key cybersecurity controls and evidence owned by the Information Security personnel.
Maintain a list of global cybersecurity requirements that need to be evaluated for alignment or compliance (testing).
Engage with global SMEs to update and maintain the control/evidence framework, and to develop test steps.
Facilitate testing of control design and effectiveness.
Identify potential areas of improvements.
Perform and document compliance assessments against selected global regulations using the framework.
Create and enhance presentations for senior and executive management, clients and regulators.
Maintain a global resource with all regional presentations to boards, committees and regulators.
Support regulatory developments, including monitoring new regulations, preparing actions for new regulatory requirements, presentations, meetings, note-taking, summary reports to management.
Evaluate third party assessments of the Information Security function.
Support the metrics program.
Propose updates to cybersecurity policies and standards.
Engage in process/control improvements of the Information Security, in any area where enhancements are needed or appropriate.