Technology Risk Manager (CRISC)

Morgan Stanley; Glasgow; On-site; GBP 120,000 - 170,000; Full time

Job summary

Morgan Stanley in Glasgow is seeking a Lead Domain Aligned IT Risk Manager within Tech to oversee risk across data security domains. You will own domain outcomes, govern risk programs, and partner with technology stakeholders to ensure regulatory alignment and resilient operations.

You will bring deep cyber risk experience, regulatory risk management, and the ability to translate complex risk into clear, actionable decisions for senior leadership.

Qualifications

• Experience in cyber risk and controls within a technology environment.
• Experience with data security controls (encryption, key management, PKI).
• Experience in regulatory risk management and responding to information requests.

Responsibilities

• Own end-to-end risk domains including Data Security.
• Represent ETS Risk Management on Data Security Programs.
• Drive control coverage, remediation and governance.
• Escalate judgements and decisions to senior stakeholders.
• Translate regulatory/technical risk into actionable decisions.

Skills

Data security

Cyber risk

Regulatory risk management

Stakeholder engagement

Domain risk ownership

Communication skills

Education

Bachelor's degree in Information Technology, Risk Management, Business Continuity

Job description

We're seeking someone to join our team as a Domain Aligned IT Risk Manager in Tech. The role ensures that material risks are identified, assessed, governed and remediated in line with firm risk appetite, regulatory expectations and Enterprise Technology & Services (ETS) Risk strategy. The role owns domain outcomes, not just execution, and acts as the primary senior risk interface to technology stakeholders and governance forums for their domain.

Domain Aligned Risk Officer sits within ETS Risk Management, whose mandate is to provide clear visibility of technology risk, strengthen the ETS control environment, support regulatory and audit engagement, and ensure effective remediation of material risks across Enterprise Technology & Services. ETS is the Firm's enterprise infrastructure organisation and is responsible for the delivery of resilient core infrastructure, application services end user and collaboration tools and strategic cross-firm programs include the modernisation and cloud agenda.

Within ETS Risk Management, the Domain Aligned Risk Management (DARM) team delivers horizontal risk oversight across ETS by managing risk at the level of firm Technology Standards (domains). DARM complements super department risk officers by driving consistency in risk identification, control implementation, measurement and remediation, and by providing senior management with a clear, domain level view of risk posture.

This is a Lead Risk & Resiliency Management position at Vice President level, which is part of the job family responsible for identifying, assessing, and mitigating risks to ensure operational continuity and resilience in the face of potential threats or disruptions that could impact the organization, plus management of ongoing incidents.

Since 1935, Morgan Stanley is known as a global leader in financial services, always evolving and innovating to better serve our clients and our communities in more than 40 countries around the world.

What you'll do in the role:

• End to end ownership of a number of risk domains including Data Security.
• Accountability for all Domain Aligned Risk Management services within scope:
  • Domain Risk Ownership
  • Participate and represent ETS Risk Management on key Data Security Programs
  • Control Coverage & Remediation
  • Stakeholder Engagement & Governance
  • Judgement & Escalation
  • Decision Making Authority Experience & Capabilities
  • Strong background in technology risk and control frameworks, or regulatory risk management
  • Demonstrated ability to own domain level outcomes, not just activities
  • Comfortable operating with senior stakeholders and governance forums
  • Able to translate complex regulatory or technical risk into clear, actionable decisions

What you'll bring to the role:

• Experience in cyber risk and controls within a technology environment.
• Experience and/or awareness in cyber risk and controls supporting data security (encryption, key management, certificate management etc).
• Experience in regulatory risk management (e.g. responding to regulatory requests for information)
• Have industry certification (e.g. CRISC, CISSP)
• Bachelor's degree in Information Technology, Risk Management, Business Continuity, or a related field, or equivalent experience.
• Ability to develop and execute strategic risk and resiliency initiatives aligned with business objectives.
• Excellent communication and interpersonal skills, with experience in engaging senior stakeholders.
• Experience in aligning risk and resiliency practices with regulatory requirements and industry standards.

#GLTECH #LI-LM1 #Hybrid

WHAT YOU CAN EXPECT FROM MORGAN STANLEY:

At Morgan Stanley, we raise, manage and allocate capital for our clients - helping them reach their goals. We do it in a way that's differentiated - and we've done that for 90 years. Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren't just beliefs, they guide the decisions we make every day to do what's best for our clients, communities and more than 80,000 employees in 1,200 offices across 42 countries. At Morgan Stanley, you'll find an opportunity to work alongside the best and the brightest, in an environment where you are supported and empowered. Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences. We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry. There's also ample opportunity to move about the business for those who show passion and grit in their work.

To learn more about our offices across the globe, please copy and paste https://www.morganstanley.com/about-us/global-offices into your browser.

Certified Persons Regulatory Requirements:

If this role is deemed a Certified role and may require the role holder to hold mandatory regulatory qualifications or the minimum qualifications to meet internal company benchmarks.

Flexible work statement

Interested in flexible working opportunities? Morgan Stanley empowers employees to have greater freedom of choice through flexible working arrangements. Speak to our recruitment team to find out more.

Morgan Stanley is an equal opportunity employer committed to building and maintaining a workforce that is diverse in experience and background. Our recruiting efforts reflect our strong commitment to a culture of inclusion, where individuals are hired, developed, and advanced based on their skills and talents.

Our workforce reflects a broad cross-section of the global communities in which we operate, bringing a variety of backgrounds, talents, perspectives, and experiences.

For more information, please visit: https://www.morganstanley.com/people-opportunities/eeo.