Senior Security Architect Specialist (Hybrid)

860 Morgan Stanley Svcs Canada Co; Montreal (administrative region); On-site; CAD 150,000 - 210,000; Full time

Job summary

Morgan Stanley in Montreal, QC, is seeking a Senior Security Architect Specialist to lead security assessments and threat modeling across a complex tech landscape. This Lead Risk & Resiliency Management role operates at VP level within the Technology division, driving remediation for critical risks and coordinating with business owners.

You will review security designs, identify gaps, define control requirements, and mentor teams on best practices. Bilingual in French and English required.

Qualifications

• At least 6 years of relevant experience in infrastructure security, application security, or secure risk assessment within large enterprise environments.
• Bachelor's degree in Computer Science, Software Engineering, or equivalent.
• Ability to explain common application vulnerabilities and remediation strategies to developers.
• Ability to communicate technology risks to Business Owners and senior stakeholders.
• Experience in security architecture reviews, threat modeling, and technical risk identification.
• Understanding of enterprise security controls including endpoint, network, OS, and cloud-based technologies.
• Experience with Microsoft technologies including Active Directory, Intune, Endpoint Manager/SCCM, Defender, Office 365, or Power Platform.
• CISSP certification preferred.

Responsibilities

• Undertake security design reviews and support ongoing infrastructure and endpoint security controls.
• Identify technical control gaps and assess security requirements to remediate risks.
• Ensure the quality and consistency of security assessments across technology initiatives.
• Provide architectural guidance to help technology teams follow security best practices.
• Communicate security gaps, attack scenarios, and risks to IT System Owners and stakeholders.
• Deliver remediation guidance and partner with technology owners to address vulnerabilities.
• Articulate technology and security risks to Business Owners to support risk-based decisions.
• Define new technical control requirements as emerging technologies are introduced.
• Provide SME coaching on infrastructure and application security across the organization.

Skills

Security architecture

Threat modeling

Risk assessment

Communication to stakeholders

Cloud, network, endpoint security

Bilingual English/French

Education

Bachelor's degree in Computer Science or Software Engineering

CISSP certification

Tools

Active Directory (Microsoft technologies)

Intune / Endpoint Manager / SCCM

Defender

Office 365

Power Platform

Job description

We’re seeking someone to join our team as a Senior Security Architect Specialist to lead security assessments and threat modeling activities across a diverse technology environment, helping strengthen the firm’s security posture by identifying risks and driving effective remediation strategies. In the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities. This is a Lead Risk & Resiliency Management position at Vice President level, which is part of the job family responsible for identifying, assessing, and mitigating risks to ensure operational continuity and resilience in the face of potential threats or disruptions that could impact the organization, plus management of ongoing incidents. Since 1935, Morgan Stanley is known as a global leader in financial services, always evolving and innovating to better serve our clients and our communities in more than 40 countries around the world.

What you'll do in the role:

• Undertake security design reviews and support the ongoing design of new infrastructure and endpoint security controls.
• Identify technical control gaps and assess security requirements needed to remediate identified risks.
• Ensure the ongoing quality and consistency of security assessments across technology initiatives.
• Provide architectural and implementation guidance to help technology teams follow security best practices.
• Communicate technical control gaps, attack scenarios, and associated risks to IT System Owners and technology stakeholders.
• Deliver detailed remediation guidance and partner with technology owners to address identified vulnerabilities.
• Articulate technology and security risks to Business Owners and support risk-based decision making.
• Identify and define new technical control requirements as emerging technologies are introduced.
• Provide subject matter expertise, coaching, and support on infrastructure and application security topics across the technology organization.

What you'll bring to the role:

• At least 6 years' relevant experience in infrastructure security, application security, or secure risk assessment within large enterprise environments.
• Bachelor's degree in Computer Science, Software Engineering, or equivalent.
• Ability to explain common application vulnerabilities and detailed remediation strategies to developers.
• Ability to communicate technology risks introduced by application and infrastructure vulnerabilities to Business Owners and senior stakeholders.
• Experience in security architecture reviews, threat modeling, and technical risk identification.
• Understanding of enterprise security controls, including endpoint, network, operating system, and cloud-based technologies.
• Experience with Microsoft technologies, including Active Directory, Intune, Endpoint Manager/SCCM, Defender, Office 365, or Power Platform.
• Experience with secure network architecture, DevOps environments, or SaaS technology platforms.
• CISSP certification or comparable industry-recognized security certification preferred.

All our positions are located in Montreal, Quebec.

We offer a hybrid work environment, combining remote work and attendance in the office.

Knowledge of French and English is required.

WHAT YOU CAN EXPECT FROM MORGAN STANLEY:

At Morgan Stanley, we raise, manage and allocate capital for our clients – helping them reach their goals. We do it in a way that’s differentiated – and we’ve done that for 90 years.

Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren’t just beliefs, they guide the decisions we make every day to do what's best for our clients, communities and more than 80,000 employees in 1,200 offices across 42 countries.

At Morgan Stanley, you'll find an opportunity to work alongside the best and the brightest, in an environment where you are supported and empowered.

Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences.

We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry.

There's also ample opportunity to move about the business for those who show passion and grit in their work.

To learn more about our offices across the globe, please copy and paste https://www.morganstanley.com/about-us/global-offices into your browser.

Morgan Stanley is an equal opportunity employer committed to building and maintaining a workforce that is diverse in experience and background.

Our recruiting efforts reflect our strong commitment to a culture of inclusion, where individuals are hired, developed, and advanced based on their skills and talents.

Our workforce reflects a broad cross-section of the global communities in which we operate, bringing a variety of backgrounds, talents, perspectives, and experiences.

For more information, please visit: https://www.morganstanley.com/people-opportunities/eeo.

At Morgan Stanley, we advise, originate, trade, manage and distribute capital for people, governments and institutions, always with a standard of excellence and guided by our core values.

Morgan Stanley is dedicated to providing first-class service to our clients, in a way that reflects our commitment to creating a more sustainable future and fostering stronger communities around the world.

In each line of business, we strive to demonstrate our belief in the power of transformative thinking, innovative strategies and leading-edge solutions—and in the ability of capital to work for the benefit of all society.

What We Do