Associate, Technology Audit

BlackRock•New York, NY

4d•$105,000 - $137,500•Hybrid

About The Position

Internal Audit’s mission is to provide independent assurance to the Board of Directors and Executive Management that BlackRock’s businesses are effectively managed and aligned with strategic, operational, and risk management objectives. The Technology Audit team engages with senior leaders and business stakeholders globally to understand technology risks, evaluate the effectiveness of key controls, and identify opportunities to strengthen processes. Working across the United States, Europe, and Asia, the team performs design reviews and testing across application systems and technology infrastructure, helping BlackRock maintain a strong control environment and meet its commitments to clients, shareholders, employees, and other stakeholders.

Requirements

Bachelor’s degree or equivalent; a degree in Management Information Systems, Engineering, Computer Science, Technology, or a related field is preferred.
Demonstrated experience in technology audit or technology risk management, preferably within financial services.
Knowledge of financial instruments, asset management processes, and applicable regional and global regulatory requirements.
Strong understanding of application development, databases, operating systems, networking, technology infrastructure, and controls relating to application security, system architecture, technology operations, and technology governance.
Demonstrated critical thinking, problem-solving, communication, and interpersonal effectiveness, with a commitment to delivering high-quality work; practitioner-level artificial intelligence (AI) fluency, including the ability to critically evaluate AI-generated outputs, understand associated risks and limitations, and apply sound professional judgment in the use of AI-enabled tools.

Nice To Haves

Professional certifications such as Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), or Certified Ethical Hacker (CEH) are a plus.
Familiarity with industry frameworks such as the International Organization for Standardization (ISO), Information Technology Infrastructure Library (ITIL), and Control Objectives for Information and Related Technologies (COBIT).

Responsibilities

Partner with stakeholders to understand key business and technology processes, identify risks, and evaluate the effectiveness of associated controls.
Contribute to risk-based audit planning and scoping activities by assessing business priorities, technology changes, and emerging risks.
Execute testing of technology controls within integrated business audits and technology-focused reviews covering cybersecurity, applications, infrastructure, databases, networking, cloud technologies, and technology operations.
Identify, document, and escalate control deficiencies and audit observations while communicating findings clearly to stakeholders.
Track and validate remediation efforts to help ensure identified issues are addressed effectively and sustainably.
Conduct risk assessments to identify emerging firm-wide and business-specific risks, including those resulting from organizational or technology change.
Contribute to department-wide initiatives that enhance audit methodology, team effectiveness, knowledge sharing, and global collaboration.