Director, Technology Regulatory Compliance at BlackRock in London

Job description

About this role Role purpose BlackRock is seeking a Director of Technology Regulatory Compliance to develop and operate a global compliance programme addressing the rapidly evolving regulation of technology, artificial intelligence, data, cyber security, digital operational resilience and technology service providers. The role will cover BlackRock’s distinct but interconnected responsibilities as: A regulated financial institution that develops and uses technology , including AI, data and cloud-based capabilities; A customer of third-party technology and ICT services , including cloud, managed service, software, data and AI providers; and A provider of technology and data services to clients , including through Aladdin, eFront and Preqin. This dual client-and-provider perimeter creates regulatory obligations that extend beyond a traditional financial-services compliance model. The successful candidate will therefore combine technology expertise, regulatory interpretation and programme-building capability. They will work alongside the responsibilities of key BlackRock divisions such as the Aladdin business, Legal, Information Security, Risk Management and Technology & Operations. This role will translate complex and sometimes overlapping global requirements into a coherent, risk-based Technology Compliance Programme. This will include governance, regulatory inventory and applicability, control frameworks, product compliance, assurance, regulatory engagement, management information and evidence of compliance. As such, this role requires a technology regulatory specialist who can operate credibly with engineers, technology product owners and cyber professionals as well as collaborating with key stakeholders whilst providing effective challenge and assurance from a Compliance perspective. Key responsibilities Lead compliance oversight for BlackRock's technology businesses (Aladdin, eFront and Preqin), supporting the development of new technology products and capabilities by assessing them against relevant regulatory requirements and liaising with specialist compliance teams where financial regulatory considerations arise. Assess the regulatory implications of providing technology or data services to clients and identify the obligations that may attach directly to BlackRock as a technology or data (including AI-service) provider. Design and implement a global, risk-based Technology Compliance Programme covering technology, AI, Cloud, data, cyber security, and operational & digital resilience requirements, aligning to associated technology-driven regulation (e.g. DORA, EU AI Act, NIS2, US NIST, Australia Cyber Security Act). Establish the programme’s mandate, scope, governance, risk taxonomy, standards, procedures, control objectives and reporting arrangements. Maintain a global inventory of current and emerging technology-related laws, regulations, standards and supervisory expectations. Translate legal and regulatory requirements into clear business, product, technology and control requirements whilst balancing obligations with market practice. Define Compliance’s role relative to the, Legal, Technology Risk Management, Information Security, and other control functions, ensuring clear accountability and avoidance of control duplication. Continuously review and develop the compliance program based on changes to regulatory risk, business strategy, product development and supervisory priorities whilst also taking into consideration changes to relevant laws and regulations. This includes ensuring that changes to IT services and infrastructure are evaluated, authorised, and managed in accordance with regulatory standards., Develop a structured approach to identifying and managing obligations arising from BlackRock’s different roles as a financial institution ,technology provider, and AI provider/deployer Support the development and maintenance of IT compliance policies, technical standards, and secure configuration baselines. Ensure th