We are seeking a highly skilled and experienced Director to provide audit coverage for application and system infrastructure supporting the Cybersecurity Management Technology Audit team, specializing in assurance activities across Digital Assets.
The Internal Audit Division (IAD) drives attention and resources to vulnerabilities by providing an independent and well-informed view and impactful messages about the most important risks facing our Firm. This is accomplished by performing a range of assurance activities to independently assess the quality and effectiveness of Morgan Stanley's system of internal control, including risk management and governance systems and processes. IAD serves as an objective and independent function within the Firm's risk management framework to foster continual improvement of risk management processes. This is a Director level position within Technical Specialist Audit, which is responsible for providing extensive subject matter expertise and reinforcing the ability of business and technology audit teams to appropriately assess risk and determine and execute coverage..
Location: New York, NY (4x per week in office)
What you'll do in the role:
- Formulate and lead a wide range of assurance activities to assess risks within coverage area and the state of controls in place to mitigate them
- Proactively identify risk and emerging risk, and factor into assurance coverage
- Articulate actionable insights to management regarding criticality and impact of risks to the business
- Effectively partner with colleagues and stakeholders globally to drive effective working relationships
- Align projects and initiatives with department and coverage area priorities, and oversee team's execution of deliverables in accordance with audit methodology and quality standards
What you'll bring to the role:- Advanced knowledge of industry, global markets, and regulations relevant to Cybersecurity and Digital Assets
- Strong understanding of audit principles, methodology, tools, and processes (e.g., risk assessments, planning, testing, reporting and continuous monitoring)
- Ability to articulate risk and impact clearly and succinctly to different audiences
- Effective change and project management techniques and ability to support teams in adapting new ways of working
- Ability to leverage and analyze data to inform focus and views on risk
- Ability to coach and mentor others and create an inclusive work environment for team
- At least 6 years' relevant experience in Cyber, Information Security, Digital Assets, Technology Audit or Technology Risk Management, preferably within financial services, would generally be expected to find the skills required for this role
- Deep expertise in cybersecurity, cloud technologies, digital asset custody, cryptographic controls, blockchain and DLT platforms, operational resilience, and emerging cyber threats
- Demonstrated experience assessing cyber and information security risks and controls associated with digital assets (e.g., private-key and wallet security, cryptographic controls, smart contracts, blockchain infrastructure, third-party dependencies, transaction security, etc.)
-Relevant certifications (i.e., CISA, CISSP, CEH, OSCP, blockchain, cryptography, etc.) preferred
Expected base pay rates for the role will be between $135,000 and $202,500 per year at the commencement of employment. However, base pay if hired will be determined on an individualized basis and is only part of the total compensation package, which, depending on the position, may also include commission earnings, incentive compensation, discretionary bonuses, other short and long-term incentive packages, and other Morgan Stanley sponsored benefit programs.
To learn more about our offices across the globe, please copy and paste https://www.morganstanley.com/about-us/global-offices into your browser.
