Associate, Technology Audit

About this role Your team Internal Audit’s mission is to provide independent assurance to the Board of Directors and Executive Management that BlackRock’s businesses are effectively managed and aligned with strategic, operational, and risk management objectives. The Technology Audit team engages with senior leaders and business stakeholders globally to understand technology risks, evaluate the effectiveness of key controls, and identify opportunities to strengthen processes. Working across the United States, Europe, and Asia, the team performs design reviews and testing across application systems and technology infrastructure, helping BlackRock maintain a strong control environment and meet its commitments to clients, shareholders, employees, and other stakeholders. Your role and impact As a Technology Audit Associate, you will assess risks and evaluate technology controls across a diverse and evolving technology environment. You will collaborate with audit colleagues, technology teams, and business stakeholders to identify control gaps, support risk-based decision-making, and contribute to the effectiveness of BlackRock’s risk management framework. Your work will help strengthen technology resiliency, support regulatory compliance, and enhance operational practices across the organization.

In every role at BlackRock, you'll be expected to apply sound judgement and critical thinking to solve complex problems, adapt as the business evolves, and combine the curiosity to explore new approaches and technologies with the rigor to challenge the results. The scope of this role also includes the following responsibilities: Partner with stakeholders to understand key business and technology processes, identify risks, and evaluate the effectiveness of associated controls. Contribute to risk-based audit planning and scoping activities by assessing business priorities, technology changes, and emerging risks. Execute testing of technology controls within integrated business audits and technology-focused reviews covering cybersecurity, applications, infrastructure, databases, networking, cloud technologies, and technology operations. Identify, document, and escalate control deficiencies and audit observations while communicating findings clearly to stakeholders. Track and validate remediation efforts to help ensure identified issues are addressed effectively and sustainably. Conduct risk assessments to identify emerging firm-wide and business-specific risks, including those resulting from organizational or technology change. Contribute to department-wide initiatives that enhance audit methodology, team effectiveness, knowledge sharing, and global collaboration.

Bachelor’s degree or equivalent; a degree in Management Information Systems, Engineering, Computer Science, Technology, or a related field is preferred. Demonstrated experience in technology audit or technology risk management, preferably within financial services. Knowledge of financial instruments, asset management processes, and applicable regional and global regulatory requirements. Professional certifications such as Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), or Certified Ethical Hacker (CEH) are a plus. Familiarity with industry frameworks such as the International Organization for Standardization (ISO), Information Technology Infrastructure Library (ITIL), and Control Objectives for Information and Related Technologies (COBIT). Strong understanding of application development, databases, operating systems, networking, technology infrastructure, and controls relating to application security, system architecture, technology operations, and technology governance. Demonstrated critical thinking, problem-solving, communication, and interpersonal effectiveness, with a commitment to delivering high-quality work; practitioner-level