About this role
The Supply Chain Security team is responsible for identifying, assessing, and managing cybersecurity risks associated with BlackRock’s third-party service providers. We are seeking an experienced cybersecurity professional to lead our Critical Providers & Emerging Risk pillar.
This Vice President will lead security engagement and ongoing monitoring of our most critical service providers, with particular focus on financial institutions and providers supporting critical business services. The role will strengthen how Supply Chain Security partners with the Provider Strategy Group and other risk functions to provide coordinated and proactive oversight of these relationships.
The role will also lead capabilities focused on emerging cyber threats and vulnerabilities across the broader vendor population, develop a security framework for service providers supporting tokenization and digital assets, and use automation to improve the scale and effectiveness of Supply Chain Security operations.
Responsibilities
- Serve as a senior Information Security liaison for Critical Service Providers, providing security oversight and coordinating with providers, business owners, and internal risk partners.
- Develop and manage an ongoing security monitoring and health-check program for Critical Service Providers to identify changes in security posture, incidents, vulnerabilities, and emerging risks.
- Uplift the existing Provider Strategy Group engagement model, strengthening how Supply Chain Security, PSG, and other risk partners prepare for provider engagements, share security information, manage findings, track remediation, and escalate material risks.
- Build a more proactive approach to Critical Service Provider oversight that provides appropriate security monitoring and engagement between periodic assessments and formal Resiliency Health Checks.
- Own and lead the team’s vulnerability impact analysis process for significant cyber vulnerabilities, threats, and incidents affecting critical third-party service providers, including intake, triage, provider impact assessment, business and provider outreach, evidence collection, remediation tracking, escalation of material risk, and closure reporting.
- Develop a security framework for service providers supporting the tokenization of funds and digital assets, establishing appropriate security and resiliency requirements for tokenization platforms, custody solutions, blockchain infrastructure, and related services.
- Partner across Information Security, Threat Intelligence, Provider Strategy Group, Digital Assets, Technology, Risk, Legal, Sourcing, and the business to evaluate material third-party security risks and drive appropriate actions.
- Implement automation and data-driven processes to improve vendor monitoring, risk identification, provider outreach, evidence collection, workflow management, and reporting.
- Identify recurring risks and lessons across the provider population and use those insights to continuously improve Supply Chain Security requirements, monitoring, and assessment processes.
- Communicate material third-party cybersecurity risks and recommendations clearly to senior leadership and relevant governance forums.
Qualifications
- 8+ years of experience in financial services, cybersecurity, technology risk, third-party risk, or a related field.
- Demonstrated experience developing or leading cybersecurity, security risk, or third-party risk programs.
- Experience with cyber threat intelligence, emerging cybersecurity risks, and vulnerability management.
- Strong understanding of cybersecurity risks associated with third-party service providers and critical business services.
- Experience working in financial services or other highly regulated environments strongly preferred.
- Ability to lead cross-functional initiatives and translate complex cybersecurity issues into clear business risks and actionable recommendations.
- Strong written, verbal, and senior stakeholder communication skills.
- Experience with digital assets, blockchain, tokenization, or associated security risks is preferred.
- Experience using automation and data-driven approaches to improve cybersecurity or risk-management processes is preferred.
- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Risk Management, Finance, or a related discipline, or equivalent professional experience.
- CISSP, CISM, CRISC, or an equivalent cybersecurity or risk-management certification is preferred but not required.
For DC3-Washington - 1401 New York Avenue, N.W., 3rd Floor Only the salary range for this position is USD$148,000.00 - USD$200,000.00 . Additionally, employees are eligible for an annual discretionary bonus, and benefits including healthcare, leave benefits, and retirement benefits. BlackRock operates a pay-for-performance compensation philosophy and your total compensation may vary based on role, location, and firm, department and individual performance.
Our benefits
To help you stay energized, engaged and inspired, we offer a wide range of benefits including a strong retirement plan, tuition reimbursement, comprehensive healthcare, support for working parents and Flexible Time Off (FTO) so you can relax, recharge and be there for the people you care about.
Our hybrid work model
BlackRock’s hybrid work model is designed to enable a culture of collaboration and apprenticeship that enriches the experience of our employees, while supporting flexibility for all. Employees are currently required to work at least 4 days in the office per week, with the flexibility to work from home 1 day a week. Some business groups may require more time in the office due to their roles and responsibilities. We remain focused on increasing the impactful moments that arise when we work together in person – aligned with our commitment to performance and innovation. As a new joiner, you can count on this hybrid model to accelerate your learning and onboarding experience here at BlackRock.
Guidance on AI use for candidates
At BlackRock, AI has long been part of how we work – enhancing decision-making, improving operations, and helping us deliver better outcomes for clients. We encourage candidates to use AI thoughtfully to learn, prepare, and work more effectively; but during our interview process, we want to focus on getting to know you through your own experiences, thinking, and judgment. To support you, we’ve provided guidance on when and how to use AI during our hiring process so you can approach each step with confidence and showcase your best self.
About BlackRock
At BlackRock, we are all connected by one mission: to help more and more people experience financial well-being. Our clients, and the people they serve, are saving for retirement, paying for their children’s educations, buying homes and starting businesses. Their investments also help to strengthen the global economy: support businesses small and large; finance infrastructure projects that connect and power cities; and facilitate innovations that drive progress.
This mission would not be possible without our smartest investment – the one we make in our employees. It’s why we’re dedicated to creating an environment where our colleagues feel welcomed, valued and supported with networks, benefits and development opportunities to help them thrive.