CTIS Cyber Risk Oversight Lead

474 MS Services Group, Inc.; United States; On-site; USD 95,000 - 170,000; Full time

Benefits offered by this job

Comprehensive benefits package

Discretionary incentive compensation

Job summary

Morgan Stanley is seeking a Vice President, CTIS Risk Oversight Lead to head a team focused on independent oversight of cyber, technology and information security risk. The role covers IT resilience, architecture and security programs, asset management, vulnerability management, IAM, and related areas.

You will partner with Technology, Non-Financial Risk, Legal, Audit and business stakeholders to identify and address emerging risks, oversee KRIs and risk reporting, and support regulatory

Qualifications

• Provide independent oversight and challenge of the Firm's cybersecurity and technology organizations risk management activities.
• Manage the team in assessing the effectiveness of risk and control frameworks supporting new technology infrastructure, applications, cyber defenses, and information security programs.
• Lead the team in review and challenge of risk assessments, control evaluations, issue remediation plans, and risk acceptance decisions.
• Build and maintain strong relationships with Technology, Non-Financial Risk, Legal, Audit, and business stakeholders to identify and address emerging risks.
• Evaluate new technology initiatives and strategic transformation programs from a risk perspective.
• Monitor KRIs, metrics, and trends to identify areas requiring enhanced oversight or escalation.
• Support regulatory examinations, internal audits, and governance committee reporting related to technology and cyber risk.
• Drive consistency in risk management practices and ensure policy requirements and governance standards are addressed.
• Prepare executive-level risk reporting and deliver presentations for senior management and risk governance forums.
• Contribute to Enterprise Risk Management and NFR programs.
• Provide thought leadership on emerging technology, cyber threats, and regulatory developments.

Responsibilities

• Provide independent oversight and challenge of the Firm's cybersecurity and technology organizations risk management activities.
• Manage the team in assessing the effectiveness of risk and control frameworks supporting new technology infrastructure, applications, cyber defenses, and information security programs.
• Lead the team in review and challenge of risk assessments, control evaluations, issue remediation plans, and risk acceptance decisions.
• Build and maintain strong positive relationships and partner with Technology, Non-Financial Risk, Legal, Audit, and business stakeholders to identify and address emerging risks.
• Evaluate new technology initiatives and strategic transformation programs from a risk perspective.
• Manage the team in monitoring key risk indicators (KRIs), metrics, and trends to identify areas requiring enhanced oversight or escalation.
• Support regulatory examinations, internal audits, and governance committee reporting related to technology and cyber risk.
• Drive consistency in risk management practices, ensuring policy requirements, governance standards, and other risk guidance are appropriately addressed.
• Manage the team in preparing executive-level risk reporting and deliver presentations for senior management and at risk governance forums.
• Contribute to the development and enhancement of Enterprise Risk Management and NFR programs.
• Provide thought leadership on emerging technology, cyber threats, and regulatory developments.

Job description

Morgan Stanley is seeking a Vice President, CTIS Risk Oversight Lead to head a team focused on independent oversight of cyber, technology and information security risk. The role covers IT resilience, architecture and security programs, asset management, vulnerability management, IAM, and related areas.

You will partner with Technology, Non-Financial Risk, Legal, Audit and business stakeholders to identify and address emerging risks, oversee KRIs and risk reporting, and support regulatory