Director, Technology Regulatory Compliance

Job title: Director, Technology Regulatory Compliance

BlackRock is seeking a Director of Technology Regulatory Compliance to develop and operate a global compliance programme addressing the rapidly evolving regulation of technology, artificial intelligence, data, cyber security, digital operational resilience and technology service providers.

The role will cover BlackRock’s distinct but interconnected responsibilities as:

A regulated financial institution that develops and uses technology, including AI, data and cloud-based capabilities; A customer of third-party technology and ICT services, including cloud, managed service, software, data and AI providers; and A provider of technology and data services to clients, including through Aladdin, eFront and Preqin.

This dual client-and-provider perimeter creates regulatory obligations that extend beyond a traditional financial-services compliance model. The successful candidate will therefore combine technology expertise, regulatory interpretation and programme-building capability. They will work alongside the responsibilities of key BlackRock divisions such as the Aladdin business, Legal, Information Security, Risk Management and Technology & Operations.

This role will translate complex and sometimes overlapping global requirements into a coherent, risk-based Technology Compliance Programme. This will include governance, regulatory inventory and applicability, control frameworks, product compliance, assurance, regulatory engagement, management information and evidence of compliance. As such, this role requires a technology regulatory specialist who can operate credibly with engineers, technology product owners and cyber professionals as well as collaborating with key stakeholders whilst providing effective challenge and assurance from a Compliance perspective.

Key responsibilities

• Lead compliance oversight for BlackRock's technology businesses (Aladdin, eFront and Preqin), supporting the development of new technology products and capabilities by assessing them against relevant regulatory requirements and liaising with specialist compliance teams where financial regulatory considerations arise.

• Assess the regulatory implications of providing technology or data services to clients and identify the obligations that may attach directly to BlackRock as a technology or data (including AI-service) provider.

• Design and implement a global, risk-based Technology Compliance Programme covering technology, AI, Cloud, data, cyber security, and operational & digital resilience requirements, aligning to associated technology-driven regulation (e.g. DORA, EU AI Act, NIS2, US NIST, Australia Cyber Security Act).

• Establish the programme’s mandate, scope, governance, risk taxonomy, standards, procedures, control objectives and reporting arrangements.

• Maintain a global inventory of current and emerging technology-related laws, regulations, standards and supervisory expectations. Translate legal and regulatory requirements into clear business, product, technology and control requirements whilst balancing obligations with market practice.

• Define Compliance’s role relative to the, Legal, Technology Risk Management, Information Security, and other control functions, ensuring clear accountability and avoidance of control duplication.

• Continuously review and develop the compliance program based on changes to regulatory risk, business strategy, product development and supervisory priorities whilst also taking into consideration changes to relevant laws and regulations. This includes ensuring that changes to IT services and infrastructure are evaluated, authorised, and managed in accordance with regulatory standards.

• Develop a structured approach to identifying and managing obligations arising from BlackRock’s different roles as a financial institution, technology provider, and AI provider/deployer

• Support the development and maintenance of IT compliance policies, technical standards, and secure configuration baselines. Ensure these are embedded into solution design, procurement, and operational processes, and are enforced through effective automation and monitoring capabilities

• Support engagements with financial, technology, AI, and cyber-security regulators globally.

• Represent Compliance in interactions with financial, technology, AI and cyber-security regulators globally, leading responses to regulatory enquiries, examinations, thematic reviews and supervisory engagements, and providing credible challenge and advocacy on BlackRock’s approach to technology, AI and digital resilience regulation.

• Leadership and stakeholder management

• Act as a senior technology-regulatory subject-matter expert within Global Compliance.

• Build trusted relationships with senior leaders across Technology, Product, Information Security, Data, AI, Legal, Risk, Operations and Internal Audit.

• Influence technical and commercial decisions while maintaining appropriate Compliance independence.

• Build and lead a specialist team as the programme develops.

• Develop technology and digital-regulation capability across the broader Compliance function.

• Represent Compliance in relevant architecture, product, AI, data, cyber, resilience and third-party governance bodies.

• Technical and professional capabilities

• Strong understanding of modern enterprise technology, including cloud architecture, APIs, data platforms, software-development lifecycles, and distributed service models.

• Working knowledge of cyber-security and resilience concepts, including secure development, vulnerability management, recovery, penetration testing, and incident response.

• Ability to read technical documentation, architecture diagrams, control descriptions, and testing results.

• Experience in designing and implementing regulations into technical and operational requirements.

• Experience designing risk taxonomies, control libraries, obligation mappings, and assurance methodologies.

• Understanding of technology-provider and software supply chains, including subcontracting and concentration risk.

• Strong written communication, with the ability to present complex issues succinctly to senior executives and Boards.

• Credibility with engineers and technologists, combined with independence of judgement and a willingness to challenge.

• Technology and cyber-risk management, including control frameworks and technical assurance.

• Cloud, software, data-platform, or AI governance.

• Advising on the regulatory obligations of technology providers as well as customers of technology.

• Engaging with regulators, external auditors, clients, and senior governance forums.

• Leading global programmes across multiple jurisdictions and legal entities.

• Experience with enterprise investment technology, financial data, portfolio-management platforms, risk systems or private-markets technology would be particularly valuable.

Qualifications

• The role should not require every candidate to hold the same qualification. Strong candidates may come from technology, cyber, engineering, risk, audit, legal or compliance backgrounds.

• Candidate profile

The successful candidate is likely to be:

• A technology regulatory specialist that understands global requirements

• Desirable specialist knowledge of key Global, EU and UK technology regulations (e.g. EU AI Act, DORA, EU Cyber resilience act etc)

• Comfortable moving between regulatory text, technical architecture and senior management decision-making

• Pragmatic and solutions-oriented, while prepared to challenge where regulatory risk is not adequately controlled

• Capable of building a programme from first principles rather than administering a mature, pre-existing framework

• Effective in a global, matrixed organisation with multiple accountable control functions

• Comfortable operating in areas where regulatory expectations are developing and precedent is limited.

• Our benefits

• To help you stay energized, engaged and inspired, we offer a wide range of employee benefits including: retirement investment and tools designed to help you in building a sound financial future; access to education reimbursement; comprehensive resources to support your physical health and emotional well-being; family support programs; and Flexible Time Off (FTO) so you can relax, recharge and be there for the people you care about.