Director, Data Risk Oversight

About this role

About this role

Title: Director, Data Risk Oversight (Second Line)

Location: New York, NY

Team: Risk & Quantitative Analysis (RQA) – Enterprise Risk Management

Reports To: Head of Operational Risk Specialists, RQA Enterprise Risk Management

About BlackRock BlackRock is one of the world’s leading asset management firms, committed to helping investors build better financial futures. We bring together the best of technology and investment expertise to deliver innovative solutions across markets and geographies. Risk management is central to our mission, and data is one of our most important assets – a key differentiator for both the firm and our Aladdin business.

Business Overview Our Risk & Quantitative Analysis (RQA) group provides independent oversight of BlackRock’s fiduciary and enterprise risks. The Enterprise Risk Management (ERM) function within RQA oversees risks that directly impact the corporate entity – including operational, technology, third party, model, and data risk – rather than the fiduciary risks assumed by funds and clients.

As a second line of defense function, our mission is to ensure senior management has defined and implemented effective risk management controls that protect our clients and our firm, while supporting the achievement of firm-wide business goals within our risk tolerance. RQA is committed to investing in our people to build both individual capability and a strong, collaborative team, within a culture of inclusion that encourages teamwork, innovation, and the development of future leaders.

The Opportunity Data risk is being formally introduced into BlackRock’s Enterprise Risk Management Framework, supported by a new enterprise Data Risk Management Policy and a Data Risk Oversight Committee (DROC) that reports into the Enterprise Risk Committee. As the volume, complexity, and strategic importance of data continue to grow – driven by the expansion of AI, data as a revenue-generating product, and growth in private markets – we are strengthening the independent oversight of data risk across the firm with a priority focus on critical investment data (CID).

We are seeking a Director to lead our Data Risk Oversight team within ERM. This role is focused on the quality, integrity, and reliability of enterprise data across its lifecycle – the risk that data is inaccurate, incomplete, untimely, or otherwise unfit for purpose – rather than on data security or cybersecurity, which are governed separately by the firm’s Technology Risk & Cybersecurity Committee. The successful candidate will provide independent review and challenge of first line data owners, hold them accountable for compliance with the firm’s data risk requirements, and give our senior committees and boards a clear, evidence-based view of the residual data risk the firm is running.

Key Responsibilities

Oversight of First Line Data Owners • Provide independent oversight, review, and challenge of first line data owners and data stewards, ensuring they identify, assess, and manage data risk in line with the firm’s data risk management policies and standards.  • Hold the first line accountable for compliance with data risk requirements across the data lifecycle – including ownership and accountability, data quality controls, metadata and lineage documentation, and fitness for purpose. • Assess the design and operating effectiveness of first line data quality controls, including data quality rules, thresholds, validation checks, and reconciliation processes, and challenge remediation where controls are insufficient. • Partner with first line teams across Aladdin Data, portfolio management, capital markets and operations, and their functional data owners to embed clear ownership and a strong culture of accountability for data risk. • Review and challenge Risk and Control Self-Assessments (RCSAs) for data risk, ensuring material data risks are transparently assessed, linked to appropriate controls, and that residual risk is formally accepted only within the firm’s risk tolerance.  

Data Incidents and Operating Events • Oversee the follow-up of data-related incidents and operating events, ensuring they are captured, triaged, and escalated in line with BlackRock’s incident management and operating event processes. • Provide independent challenge on root cause analysis, remediation, and preventative actions, confirming that lessons learned are embedded and that thematic issues are identified across events. • Ensure timely escalation of significant data incidents to the DROC and, where appropriate, the Enterprise Risk Committee and boards. • Track remediation and issues to closure, monitoring Risk & Control Issues (RCIs) and control improvements arising from events and assessments, and escalating overdue or unresolved items.  

Metrics, Risk Indicators, and Reporting • Develop and maintain data risk metrics and indicators, including Enterprise Risk Indicators (ERIs) with clear thresholds that inform an assessment of the firm’s data risk profile. • Establish ownership and reporting of data risk indicators, and translate underlying data into a concise, decision-useful view of residual risk for the DROC, the Enterprise Risk Committee, and the Board Risk Committee. • Produce board- and committee-ready reporting that clearly articulates inherent risk, the control environment, and the resulting level of residual data risk the firm is running relative to its risk tolerance. • Support the maturation of the data risk framework, including the data risk and control taxonomy, expansion of RCSA coverage, and continuous enhancement of oversight practices as the risk landscape evolves.  

Governance and Stakeholder Engagement • Act as a key contributor to the Data Risk Oversight Committee (DROC), supporting its mandate to monitor the firm’s compliance posture against data risk management policies and standards and to escalate matters as appropriate. • Collaborate with Legal & Compliance, Internal Audit, Informati

Similar jobs

• Director, Financial Risk — Koho · Remote
• Director, Risk Management — Mastercard · Purchase, New York
• Director, Risk Intelligence and Analytics — Biibhr · Cambridge, MA
• Director, Data Analytics — CrowdStrike · USA - Sunnyvale, CA
• Director, Data Analytics — Polymarket · New York
• Director, Risk Strategy & Execution — Imprint · New York City
• Director of Risk Management — Claritypay · Atlanta
• Director, Data Management — Mediabrands · New York, New York, United States