Veterans Transition Program- Associate, Cyber Security Regulatory Support

BlackRock•Wilmington, DE

2d•$110,000 - $138,000•Hybrid

About The Position

Veterans Transition Program- Associate, Cyber Security Regulatory Support. We recognize that veterans bring a unique and valued perspective to BlackRock thanks to their extraordinary backgrounds and experiences. The Veterans Transition Program is designed to support veterans in making the transition from military life to the civilian workforce. The Program offers participants the opportunity to work at the world’s largest asset manager for six months. On completion of the Program, successful participants will be offered permanent employment at BlackRock. Over the course of the Program, participants will: Join teams and have an immediate impact; Immerse themselves in the work of their teams; Gain an understanding of how BlackRock serves its clients; Be supported through training and mentorship; Get exposure to senior leaders; Participate in social and networking opportunities. Program Structure: The program begins with an orientation where you’ll learn about BlackRock’s principles, mission, purpose, and culture. You’ll learn about the asset management industry and get an in-depth look at how BlackRock serves its clients. Following orientation, you’ll join your team and gain insights into the day-to-day life of an Associate as you develop subject-matter expertise through on-the-job learning and our industry-leading technology, Aladdin. Overview Join our global team of cyber security experts, protecting our business and developing exciting capabilities on the frontline of cyber defense. The Cyber Governance team acts as a liaison with Regulators, Boards and Committees, oversees the lifecycle of cybersecurity controls owned by the Information Security team, and acts as a trusted risk advisor for the Information Security department. We are looking for a person with 5+ years of Information Security and IT Risk experience, performing risk advisory oversight for large Financial Services firms, or 4+ years in a related consulting role. This role will be responsible for maintaining and testing cybersecurity controls owned by the Information Security team and influencing the management of security risks across the organization.

Requirements

Minimum of 2 years of Active Uniformed service
<5 years of civilian work experience
Bachelor’s degree obtained pre- or post-military service
Open to all U.S. Veterans, regardless of rank or branch of service
BS in MIS, Computer Science, Information Security, or a related field
5+ years in IT Risk or IT Governance or IT Audit role in a financial services company, or as manager in Information Security in a financial services company, Or 4+ years of related consulting in a large consulting company, Or 6+ years of work experience as an accomplished Information Technologist and Technology Risk Management practitioner.
3+ years of experience with information security management frameworks (e.g., CRI, CAT, NIST, ISO, CSI, etc.)

Nice To Haves

Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), and/or Certified Information Systems Auditor (CISA) preferred.

Responsibilities

Develop and maintain a framework with key cybersecurity controls and evidence owned by the Information Security personnel.
Maintain a list of global cybersecurity requirements that need to be evaluated for alignment or compliance (testing).
Engage with global SMEs to update and maintain the control/evidence framework, and to develop test steps.
Facilitate testing of control design and effectiveness.
Identify potential areas of improvements.
Perform and document compliance assessments against selected global regulations using the framework.
Create and enhance presentations for senior and executive management, clients and regulators.
Maintain a global resource with all regional presentations to boards, committees and regulators.
Support regulatory developments, including monitoring new regulations, preparing actions for new regulatory requirements, presentations, meetings, note-taking, summary reports to management.
Evaluate third party assessments of the Information Security function.
Support the metrics program.
Propose updates to cybersecurity policies and standards.
Engage in process/control improvements of the Information Security, in any area where enhancements are needed or appropriate.