Ofertas › BlackRock
BlackRock · Washington, DC
About this role The Supply Chain Security team is responsible for identifying, assessing, and managing cybersecurity risks associated with BlackRock's third-party service providers. We are seeking an experienced cybersecurity professional to lead our Critical Providers & Emerging Risk pillar. This Vice President will lead security engagement and ongoing monitoring of our most critical service providers, with particular focus on financial institutions and providers supporting critical business services. The role will strengthen how Supply Chain Security partners with the Provider Strategy Group and other risk functions to provide coordinated and proactive oversight of these relationships. The role will also lead capabilities focused on emerging cyber threats and vulnerabilities across the broader vendor population, develop a security framework for service providers supporting tokenization and digital assets, and use automation to improve the scale and effectiveness of Supply Chain Security operations. Responsibilities Serve as a senior Information Security liaison for Critical Service Providers, providing security oversight and coordinating with providers, business owners, and internal risk partners. Develop and manage an ongoing security monitoring and health-check program for Critical Service Providers to identify changes in security posture, incidents, vulnerabilities, and emerging risks. Uplift the existing Provider Strategy Group engagement model, strengthening how Supply Chain Security, PSG, and other risk partners prepare for provider engagements, share security information, manage findings, track remediation, and escalate material risks. Build a more proactive approach to Critical Service Provider oversight that provides appropriate security monitoring and engagement between periodic assessments and formal Resiliency Health Checks. Own and lead the team's vulnerability impact analysis process for significant cyber vulnerabilities, threats, and incidents affecting critical third-party service providers, including intake, triage, provider impact assessment, business and provider outreach, evidence collection, remediation tracking, escalation of material risk, and closure reporting. Develop a security framework for service providers supporting the tokenization of funds and digital assets, establishing appropriate security and resiliency requirements for tokenization platforms, custody solutions, blockchain infrastructure, and related services. Par