Associate, Technology Audit

Job description

About this role Your team Internal Audit’s mission is to provide independent assurance to the Board of Directors and Executive Management that BlackRock’s businesses are effectively managed and aligned with strategic, operational, and risk management objectives. The Technology Audit team engages with senior leaders and business stakeholders globally to understand technology risks, evaluate the effectiveness of key controls, and identify opportunities to strengthen processes. Working across the United States, Europe, and Asia, the team performs design reviews and testing across application systems and technology infrastructure, helping BlackRock maintain a strong control environment and meet its commitments to clients, shareholders, employees, and other stakeholders. Your role and impact As a Technology Audit Associate, you will assess risks and evaluate technology controls across a diverse and evolving technology environment. You will collaborate with audit colleagues, technology teams, and business stakeholders to identify control gaps, support risk-based decision-making, and contribute to the effectiveness of BlackRock’s risk management framework. Your work will help strengthen technology resiliency, support regulatory compliance, and enhance operational practices across the organization. Your responsibilities In every role at BlackRock, you'll be expected to apply sound judgement and critical thinking to solve complex problems, adapt as the business evolves, and combine the curiosity to explore new approaches and technologies with the rigor to challenge the results. The scope of this role also includes the following responsibilities: Partner with stakeholders to understand key business and technology processes, identify risks, and evaluate the effectiveness of associated controls. Contribute to risk-based audit planning and scoping activities by assessing business priorities, technology changes, and emerging risks. Execute testing of technology controls within integrated business audits and technology-focused reviews covering cybersecurity, applications, infrastructure, databases, networking, cloud technologies, and technology operations. Identify, document, and escalate control deficiencies and audit observations while communicating findings clearly to stakeholders. Track and validate remediation efforts to help ensure identified issues are addressed effectively and sustainably. Conduct risk assessments to identify emerging firm-wide and business-specific risks, including those resulting from organizational or technology change. Contribute to department-wide initiatives that enhance audit methodology, team effectiveness, knowledge sharing, and global collaboration. Your experience Bachelor’s degree or equivalent; a degree in Management Information Systems, Engineering, Computer Science, Technology, or a related field is preferred. Demonstrated experience in technology audit or technology risk management, preferably within financial services. Knowledge of financial instruments, asset management processes, and applicable regional and global regulatory requirements. Professional certifications such as Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), or Certified Ethical Hacker (CEH) are a plus. Familiarity with industry frameworks such as the International Organization for Standardization (ISO), Information Technology Infrastructure Library (ITIL), and Control Objectives for Information and Related Technologies (COBIT). Strong understanding of application development, databases, operating systems, networking, technology infrastructure, and controls relating to application security, system architecture, technology operations, and technology governance. Demonstrated critical thinking, problem-solving, communication, and interpersonal effectiveness, with a commitment to delivering high-quality work; practitioner-level artificial intelligence (AI) fluency, including the ability to critically evaluate AI-generated outputs, understand associated risks and limitations, and apply sound professional judgment in the use of AI-enabled tools. For New York, NY Only the salary range for this position is USD$105,000.00 - USD$137,500.00 . Additionally, employees are eligible for an annual discretionary bonus, and benefits including healthcare, leave benefits, and retirement benefits. BlackRock operates a pay-for-performance compensation philosophy and your total compensation may vary based on role, location, and firm, department and individual performance. Our benefits To help you stay energized, engaged and inspired, we offer a wide range of benefits including a strong retirement plan, tuition reimbursement, comprehensive healthcare, support for working parents and Flexible Time Off (FTO) so you can relax, recharge and be there for the people you care about. Our hybrid work model BlackRock’s hybrid work model is designed to enable a culture of collaboration and apprenticeship that enriches the experience of our employees, while supporting flexibility for all. Employees are currently required to work at least 4 days in the office per week, with the flexibility to work from home 1 day a week. Some business groups may require more time in the office due to their roles and responsibilities. We remain focused on increasing the impactful moments that arise when we work together in person – aligned with our commitment to performance and innovation. As a new joiner, you can count on this hybrid model to accelerate your learning and onboarding experience here at BlackRock. Guidance on AI use for candidates At BlackRock, AI has long been part of how we work – enhancing decision-making, improving operations, and helping us deliver better outcomes for clients. We encourage candidates to use AI thoughtfully to learn, prepare, and work more effectively; but during our interview process, we want to focus on getting