Data Security Program Manager - Risk & Cyber Delivery

PowerToFly; New York (NY); On-site; USD 195,000 - 275,000; Full time

Job summary

Morgan Stanley in New York seeks a Data Security Program Manager to lead cross‑divisional risk reduction initiatives across technology, cyber, risk, and control domains. You will drive governance, milestone execution, and executive reporting to translate complex controls into measurable risk reduction for senior leadership.

The role is hands‑on yet strategic, requiring collaboration with 1LOD/2LOD/3LOD stakeholders, charting BAU transition, and delivering sustainable security programs aligned

Qualifications

• At least 10 years demonstrable project management experience.
• Demonstrable track record of operating and delivering at program manager level - 3 years minimum.
• Experience leading change in a data security, cyber risk, technology controls, compliance, or regulatory environment.
• Experience producing executive‑ready program reporting, including milestone plans, RAID logs, KPI/KRI dashboards, OpenPages Issue and Action Plan status, and governance materials for senior committees.
• Experienced of leading projects/programs using waterfall and agile methodologies.

Responsibilities

• Lead data security risk reduction execution: coordinate delivery across DSRE workstreams, ensuring milestones, action plans, dependencies, and risk‑reducing outcomes are clearly defined, tracked, and achieved.
• Manage governance and executive reporting: prepare high‑quality updates for DSEGC and related governance forums, including program status, risks, issues, decisions, metrics, and path‑to‑green plans.
• Drive milestone‑based delivery plans and BAU transition: establish integrated plans that support control implementation, adoption, operational readiness, evidence capture, and sustainable metrics‑based monitoring.
• Manage cross‑program dependencies: partner with related technology, cyber, risk, policy, and business programs to align scope, delivery sequencing, control requirements.
• Strengthen data security metrics and risk reporting: partner with metrics owners to define KPIs, KRIs, thresholds, trends, and executive narratives that demonstrate measurable control effectiveness and risk reduction.
• Support emerging technology and AI security integration: identify opportunities to improve data protection governance for AI‑enabled use cases, external websites, APIs, SaaS platforms, and other evolving data movement channels.
• Develop program artifacts: maintain charters, roadmaps, stakeholder maps, RAID logs, action trackers, decision logs, program briefs, meeting materials, and executive‑level communications.
• Translate data into actionable insights for senior audiences: analyze program status, delivery trends, control metrics, risks, dependencies

Skills

Data security

Cyber risk

Risk management

Technology governance

DLP

Data protection

Tools

OpenPages

Job description

Morgan Stanley in New York seeks a Data Security Program Manager to lead cross‑divisional risk reduction initiatives across technology, cyber, risk, and control domains. You will drive governance, milestone execution, and executive reporting to translate complex controls into measurable risk reduction for senior leadership.

The role is hands‑on yet strategic, requiring collaboration with 1LOD/2LOD/3LOD stakeholders, charting BAU transition, and delivering sustainable security programs aligned