Vice President, Supply Chain Security

BlackRock

. Serve as a senior Information Security liaison for Critical Service Providers, providing security oversight and coordinating with providers, business owners, and internal risk partners .

Posted 10/27/2026full-timeNew York City • New York • United StatesLead💰 $138,000 - $215,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in developing and managing cybersecurity and third-party risk programs, with a strong focus on financial services and regulatory compliance. Capable of leading cross-functional initiatives and effectively communicating complex cybersecurity risks to senior stakeholders.

Highest-signal resume keywords

Cybersecurity Program DevelopmentThird-Party Risk ManagementVulnerability ManagementCyber Threat IntelligenceAutomation and Data-Driven Processes

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CybersecurityRisk ManagementVulnerability Impact AnalysisTokenizationDigital AssetsSupply Chain SecuritySecurity Framework DevelopmentHealth-Check ProgramsRisk EscalationEvidence Collection

Soft Skills

Communication SkillsCross-Functional LeadershipStakeholder EngagementInformation SharingFindings Management

Certifications & Qualifications

CISSPCISMCRISC

Industry Keywords

Financial ServicesCybersecurity RisksHighly Regulated EnvironmentsEmerging Cybersecurity RisksCritical Service Providers

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Serve as a senior Information Security liaison for Critical Service Providers, providing security oversight and coordinating with providers, business owners, and internal risk partners
Develop and manage ongoing security monitoring and health-check programs for Critical Service Providers
Uplift the Provider Strategy Group engagement model and improve preparation, information sharing, findings management, remediation tracking, and risk escalation
Build proactive Critical Service Provider oversight between periodic assessments and formal Resiliency Health Checks
Lead vulnerability impact analysis for significant cyber vulnerabilities, threats, and incidents affecting critical third-party service providers
Develop a security framework for providers supporting tokenization of funds and digital assets
Partner across Information Security, Threat Intelligence, Provider Strategy Group, Digital Assets, Technology, Risk, Legal, Sourcing, and the business to evaluate material third-party security risks
Implement automation and data-driven processes for vendor monitoring, risk identification, provider outreach, evidence collection, workflow management, and reporting
Identify recurring provider risks and lessons to improve Supply Chain Security requirements, monitoring, and assessment processes
Communicate material third-party cybersecurity risks and recommendations to senior leadership and governance forums

Requirements

What you’ll need

8+ years of experience in financial services, cybersecurity, technology risk, third-party risk, or a related field
Demonstrated experience developing or leading cybersecurity, security risk, or third-party risk programs
Experience with cyber threat intelligence, emerging cybersecurity risks, and vulnerability management
Strong understanding of cybersecurity risks associated with third-party service providers and critical business services
Experience working in financial services or other highly regulated environments strongly preferred
Ability to lead cross-functional initiatives and translate complex cybersecurity issues into clear business risks and actionable recommendations
Strong written, verbal, and senior stakeholder communication skills
Experience with digital assets, blockchain, tokenization, or associated security risks preferred
Experience using automation and data-driven approaches to improve cybersecurity or risk-management processes preferred
Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Risk Management, Finance, or a related discipline, or equivalent professional experience
CISSP, CISM, CRISC, or an equivalent cybersecurity or risk-management certification preferred but not required

Benefits

Comp & perks

Annual discretionary bonus
Healthcare benefits
Leave benefits
Retirement benefits
Strong retirement plan
Tuition reimbursement
Comprehensive healthcare
Support for working parents
Flexible Time Off (FTO)
Hybrid work model with flexibility to work from home 1 day a week