Data Security Program Lead — Risk Reduction & Governance

Morgan Stanley; New York (NY); On-site; USD 195,000 - 275,000; Full time

Job summary

Morgan Stanley in United States is seeking a Data Security Program Manager to lead complex programs advancing the Firm's Data Security Strategy. You will coordinate delivery across Technology, Cyber, Risk and Control stakeholders, govern updates for senior leadership, and drive BAU transition for mature capabilities.

The role requires strong program discipline, data security knowledge, and the ability to translate control delivery into measurable risk reduction.

Qualifications

• At least 10 years demonstrable project management experience.
• 3+ years at program manager level or equivalent.
• Experience leading data security, cyber risk, or technology controls programs.
• Experience producing executive-ready program reporting and governance materials.
• Proficient in both waterfall and agile project delivery.

Responsibilities

• Lead data security risk reduction execution across DSRE workstreams.
• Prepare updates for governance forums with risks, issues, and decisions.
• Develop integrated milestone plans and BAU transition roadmaps.
• Coordinate cross-program dependencies across technology, cyber, risk and policy.
• Define KPIs and KRIs with executives; translate data into risk-reducing insights.
• Identify opportunities to integrate AI security within data protection controls.

Skills

Data security

Program management

Risk management

Leadership

Executive communication

Agile

Waterfall

BAU transition

Control governance

Cross-functional collaboration

Job description

Morgan Stanley in United States is seeking a Data Security Program Manager to lead complex programs advancing the Firm's Data Security Strategy. You will coordinate delivery across Technology, Cyber, Risk and Control stakeholders, govern updates for senior leadership, and drive BAU transition for mature capabilities.

The role requires strong program discipline, data security knowledge, and the ability to translate control delivery into measurable risk reduction.