Technology Risk & Controls VP - Infrastructure and Network Security
3262802
Glasgow
We're seeking someone to join our Technology Controls team as Technology Risk & Controls VP to support the ongoing provision of Technology Control subject matter expertise (SME) in the design, development, and on-going operation of the controls you would expect within a complex, diverse Technology environment that underpins a global Bank and organization like Morgan Stanley.
The Technology Risk, Governance and Controls (TRGC) department provides a range of Group-wide Governance and Control functions focused on Technology, Information Security or Cyber-Security within the Firm.
The position will be exposed to a significant pace of control change; with the Firm undertaking a strategic enhancement programme focused on ensuring that the current Technology, Information Security and Cyber Security controls remain fit-for-purpose; as well as leveraging opportunities (where possible) to utilize continuous control monitoring and measurement.
This role will act as a Deputy Controls Risk Officer within the Technology Controls group specific to Systems & Infrastructure Security.
The Controls Risk Officer (CRO) is accountable for providing end-to-end risk management over a particular control domain. The CRO works in partnership with groups across all lines of defence to understand and manage the risks and controls relevant to that domain. This includes defining the relevant risks and gaining a deep understanding of the related controls and their effectiveness at holistically mitigating those risks.
In the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities. This is a Technology Risk & Controls position at VP level, which is part of the job family responsible for identifying, assessing, and mitigating risks to ensure operational continuity and resilience in the face of potential threats or disruptions that could impact the organization, plus management of ongoing incidents.
What You'll Do:
Deputize for the CRO at senior committees, working groups and forums with a range of senior stakeholders, control partners and SMEs. Support the CRO aligned to a particular Technology domain to maintain a view of the risk. Support the CRO, leading and driving at pace streams of activities and/or wider team to design, develop or enhance risk or controls as well as making changes or improvements driven by relevant legislation, regulation or operational requirements - specific to Systems & Infrastructure or Network Security, Technology, Information Security or Cyber Security.
Qualifications:
These skills will help you succeed in this role:
Technology operations and infrastructure management, Network Security, Technology Oversight (2LOD) or audit background in a complex financial institution. Strong analytical and report writing skills; with focus on quality and right 1st time. Effective organizational skills and an ability to manage multiple demands and changing priorities. Detail oriented. Effective time management and planning skills (e.g. prioritization, multi-tasking and delivery focused). Strong problem-solving skills and accurate, delivery focused mindset with good attention to detail. Able to work effectively as a team or as an individual contributor - comfortable to self-organize. Experience of working with Microsoft packages (Word, Excel, PowerPoint, Outlook). Excellent communication and interpersonal skills. Excellent spoken and written English is essential for this position. Experience writing Technology policies, Standards and Procedures and controls. Strong understanding of financial legislation and regulations impacting technology risk and control management processes including technology governance, information security, cyber security and Technology. Detailed understanding of risk and control management concepts, internal controls and industry technology risk management frameworks; such as ITIL, CobiT, and NIST, CCM CSA. Ability to work and influence stakeholders effectively with all levels of the organization.
Even Better If You Have:
Degree qualification or relevant equivalent experience. Desired technical qualification - CISSP, CRISC, ITIL or equivalent experience.
What you can expect from Morgan Stanley:
We are committed to maintaining the first-class service and high standard of excellence that have defined Morgan Stanley for over 85 years. At our foundation are five core values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - that guide our more than 80,000 employees in 1,200 offices across 42 countries.
At Morgan Stanley, you'll find trusted colleagues, committed mentors and a culture that values diverse perspectives, individual intellect and cross-collaboration. Our Firm is differentiated by the calibre of our diverse team, while our company culture and commitment to inclusion define our legacy and shape our future, helping to strengthen our business and bring value to clients around the world.
Morgan Stanley is an equal opportunities employer. We work to provide a supportive and inclusive environment where all individuals can maximize their full potential. Our skilled and creative workforce is comprised of individuals drawn from a broad cross section of the global communities in which we operate and who reflect a variety of backgrounds, talents, perspectives, and experiences. #J-18808-Ljbffr
3262802
Glasgow
We're seeking someone to join our Technology Controls team as Technology Risk & Controls VP to support the ongoing provision of Technology Control subject matter expertise (SME) in the design, development, and on-going operation of the controls you would expect within a complex, diverse Technology environment that underpins a global Bank and organization like Morgan Stanley.
The Technology Risk, Governance and Controls (TRGC) department provides a range of Group-wide Governance and Control functions focused on Technology, Information Security or Cyber-Security within the Firm.
The position will be exposed to a significant pace of control change; with the Firm undertaking a strategic enhancement programme focused on ensuring that the current Technology, Information Security and Cyber Security controls remain fit-for-purpose; as well as leveraging opportunities (where possible) to utilize continuous control monitoring and measurement.
This role will act as a Deputy Controls Risk Officer within the Technology Controls group specific to Systems & Infrastructure Security.
The Controls Risk Officer (CRO) is accountable for providing end-to-end risk management over a particular control domain. The CRO works in partnership with groups across all lines of defence to understand and manage the risks and controls relevant to that domain. This includes defining the relevant risks and gaining a deep understanding of the related controls and their effectiveness at holistically mitigating those risks.
In the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities. This is a Technology Risk & Controls position at VP level, which is part of the job family responsible for identifying, assessing, and mitigating risks to ensure operational continuity and resilience in the face of potential threats or disruptions that could impact the organization, plus management of ongoing incidents.
What You'll Do:
Deputize for the CRO at senior committees, working groups and forums with a range of senior stakeholders, control partners and SMEs. Support the CRO aligned to a particular Technology domain to maintain a view of the risk. Support the CRO, leading and driving at pace streams of activities and/or wider team to design, develop or enhance risk or controls as well as making changes or improvements driven by relevant legislation, regulation or operational requirements - specific to Systems & Infrastructure or Network Security, Technology, Information Security or Cyber Security.
Qualifications:
These skills will help you succeed in this role:
Technology operations and infrastructure management, Network Security, Technology Oversight (2LOD) or audit background in a complex financial institution. Strong analytical and report writing skills; with focus on quality and right 1st time. Effective organizational skills and an ability to manage multiple demands and changing priorities. Detail oriented. Effective time management and planning skills (e.g. prioritization, multi-tasking and delivery focused). Strong problem-solving skills and accurate, delivery focused mindset with good attention to detail. Able to work effectively as a team or as an individual contributor - comfortable to self-organize. Experience of working with Microsoft packages (Word, Excel, PowerPoint, Outlook). Excellent communication and interpersonal skills. Excellent spoken and written English is essential for this position. Experience writing Technology policies, Standards and Procedures and controls. Strong understanding of financial legislation and regulations impacting technology risk and control management processes including technology governance, information security, cyber security and Technology. Detailed understanding of risk and control management concepts, internal controls and industry technology risk management frameworks; such as ITIL, CobiT, and NIST, CCM CSA. Ability to work and influence stakeholders effectively with all levels of the organization.
Even Better If You Have:
Degree qualification or relevant equivalent experience. Desired technical qualification - CISSP, CRISC, ITIL or equivalent experience.
What you can expect from Morgan Stanley:
We are committed to maintaining the first-class service and high standard of excellence that have defined Morgan Stanley for over 85 years. At our foundation are five core values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - that guide our more than 80,000 employees in 1,200 offices across 42 countries.
At Morgan Stanley, you'll find trusted colleagues, committed mentors and a culture that values diverse perspectives, individual intellect and cross-collaboration. Our Firm is differentiated by the calibre of our diverse team, while our company culture and commitment to inclusion define our legacy and shape our future, helping to strengthen our business and bring value to clients around the world.
Morgan Stanley is an equal opportunities employer. We work to provide a supportive and inclusive environment where all individuals can maximize their full potential. Our skilled and creative workforce is comprised of individuals drawn from a broad cross section of the global communities in which we operate and who reflect a variety of backgrounds, talents, perspectives, and experiences. #J-18808-Ljbffr
