Position Details

Salary $205K – $205K USD / year

Type Not Specified

Experience executive

Exp. Years 5 years

Education Bachelor's degree in Electronic Engineering, Financial Engineering, or a related field of study

Category Consulting & Advisory

About this role

Morgan Stanley is hiring a Vice President, Enterprise Advisory to identify, assess, capture, and report on Cyber, Technology and Information Security risk. The role partners across technology and business units to perform risk assessments, oversee remediation, and support governance and executive/board reporting.

Key Responsibilities

Identify and assess Cyber, Technology and Information Security risk and mitigation activities
Partner with Technology and Business Units to develop an operational risk perspective and meet regulatory expectations
Coordinate first- and second-line defense activities, addressing control gaps and disruption impacts
Conduct risk assessments, critical analysis, and scenario analyses; monitor risk data and metrics
Oversee execution of New Product Assessment (NPA) and provide executive/board reporting

Technical Overview

This role focuses on operational risk management for cyber and technology domains, including incident management, technology risk management, capacity management, and third-party cyber risk. It includes developing technology risk metrics, conducting scenario analyses, and overseeing New Product Assessment (NPA) for cyber/technology/information security components.

Ideal Candidate

The ideal candidate is a senior risk professional with 5+ years of experience assessing Cyber, Technology, and Information Security risk, including third-party cyber risk management and IT Audit. They can perform operational risk deep dives, develop and monitor technology risk metrics, and oversee risk remediation and governance activities such as New Product Assessment (NPA).

Must-Have Skills

CyberTechnologyand Information Security risk assessmentThird-Party Cyber Risk ManagementIT Auditperforming risk assessments and overseeing the subsequent risk remediationdeveloping and monitoring risk metrics in TechnologyIncident ManagementTechnology Risk ManagementCapacity Managementregulatory and industry frameworks including Gamm Leach Bliley Actregulatory and industry frameworks including National Institute of Standards and TechnologyOversee execution of the New Product Assessment (NPA) for CyberTechnology and Information Security componentsCoordinate with first line of defenseCoordinate with second line of defenseConduct risk assessmentsperform critical analysisand monitor data used to identify heightened riskBachelor's degree in Electronic EngineeringFinancial Engineeringor a related field of study5 years of experience in the position offered or 5 years as a Technical ArchitectClient Contact ManagerSenior Consultantor a closely related occupation

Required Skills

CyberTechnologyand Information Security risk assessmentThird-Party Cyber Risk ManagementIT Auditperforming risk assessmentsrisk remediationdeveloping and monitoring risk metrics in TechnologyIncident ManagementTechnology Risk ManagementCapacity ManagementGamm Leach Bliley ActNational Institute of Standards and TechnologyNew Product Assessment (NPA)Scenario Analyses

Hard Skills

CyberTechnologyand Information Security risk assessmentThird-Party Cyber Risk ManagementIT Auditrisk assessmentsrisk remediationdeveloping and monitoring risk metrics in TechnologyIncident ManagementTechnology Risk ManagementCapacity ManagementGamm Leach Bliley ActNational Institute of Standards and TechnologyGovernanceRiskandNew Product Assessment (NPA)Scenario Analyses activitiesoperational risk eventsrisk mitigation activitiesexecutive management reportingboard reportingrisk governancesteering committeesworking group committeescontrol gaps assessmentdisruption risk impact assessment

Soft Skills

Partner with relevant TechnologyBusiness Unitsand other Corporate and Infrastructure functionscredible challenge of assertionsassumptionsand conclusionscross-functional collaborationcoordination with first line of defensecoordination with second line of defensepresentations for executive managementanalysis and critical thinkingattention to detailstakeholder management

Industry & Role

Industry Banking

Job Function Lead enterprise advisory and operational risk management for cyber, technology, and information security at Morgan Stanley.

Role Subtype Risk Analyst

Tech Domains Cybersecurity

Keywords for Your Resume

Vice PresidentEnterprise AdvisoryCyberTechnologyand Information Security risk assessmentThird-Party Cyber Risk ManagementIT Auditrisk remediationrisk metricsIncident ManagementTechnology Risk ManagementCapacity ManagementGamm Leach Bliley ActNational Institute of Standards and TechnologyGovernanceRiskandNew Product Assessment (NPA)Scenario Analysesoperational riskcontrol gapsdisruption risksrisk mitigationexecutive management reportingboard reporting

Deal Breakers

Bachelor's degree in Electronic Engineering, Financial Engineering, or a related field of study, 5+ years of experience in the position offered or 5+ years as a Technical Architect, Client Contact Manager, Senior Consultant, or closely related occupation, Direct experience with Cyber, Technology, and Information Security risk assessment and Third-Party Cyber Risk Management

Apply for this Position →

Get matched to jobs like this

Luna finds roles that fit your skills and career goals — no endless scrolling required.

Create a Free Profile