Director - Digital Assets Cybersecurity (Internal Audit)

474 MS Services Group, Inc.; New York (NY); On-site; USD 135,000 - 203,000; Full time

Job summary

Morgan Stanley seeks a Director to provide audit coverage for application and system infrastructure supporting the Cybersecurity Management Technology Audit team, with a focus on Digital Assets. The role operates from New York, NY, with in-office presence 4 days per week and requires extensive subject matter expertise in cybersecurity, digital assets and risk management.

You will lead assurance activities, identify risks early, and articulate clear insights to management.

Qualifications

• 6+ years of cyber, information security, or technology risk audit experience.
• Deep expertise in cybersecurity and digital assets.
• Proven ability to assess cyber risks and controls.
• Strong knowledge of regulatory and industry standards.

Responsibilities

• Formulate and lead a wide range of assurance activities to assess risks.
• Proactively identify risk and emerging risk, and factor into coverage.
• Articulate actionable insights to management regarding risk criticality.
• Partner with colleagues globally to drive effective working relationships.
• Align projects with priorities and oversee delivery per audit methodology.

Skills

Cybersecurity expertise

Digital assets

Blockchain & DLT knowledge

Cryptographic controls

Audit risk assessment

Data analysis

Stakeholder communication

Leadership

Education

CISA

CISSP

CEH

OSCP

Job description

We are seeking a highly skilled and experienced Director to provide audit coverage for application and system infrastructure supporting the Cybersecurity Management Technology Audit team, specializing in assurance activities across Digital Assets. The Internal Audit Division (IAD) drives attention and resources to vulnerabilities by providing an independent and well-informed view and impactful messages about the most important risks facing our Firm. This is accomplished by performing a range of assurance activities to independently assess the quality and effectiveness of Morgan Stanley’s system of internal control, including risk management and governance systems and processes. IAD serves as an objective and independent function within the Firm’s risk management framework to foster continual improvement of risk management processes. This is a Director level position within Technical Specialist Audit, which is responsible for providing extensive subject matter expertise and reinforcing the ability of business and technology audit teams to appropriately assess risk and determine and execute coverage.

Location: New York, NY (4x per week in office)

What you’ll do in the role:

• Formulate and lead a wide range of assurance activities to assess risks within coverage area and the state of controls in place to mitigate them
• Proactively identify risk and emerging risk, and factor into assurance coverage
• Articulate actionable insights to management regarding criticality and impact of risks to the business
• Effectively partner with colleagues and stakeholders globally to drive effective working relationships
• Align projects and initiatives with department and coverage area priorities, and oversee team's execution of deliverables in accordance with audit methodology and quality standards

What you’ll bring to the role:

• Advanced knowledge of industry, global markets, and regulations relevant to Cybersecurity and Digital Assets
• Strong understanding of audit principles, methodology, tools, and processes (e.g., risk assessments, planning, testing, reporting and continuous monitoring)
• Ability to articulate risk and impact clearly and succinctly to different audiences
• Effective change and project management techniques and ability to support teams in adapting new ways of working
• Ability to leverage and analyze data to inform focus and views on risk
• Ability to coach and mentor others and create an inclusive work environment for team
• At least 6 years' relevant experience in Cyber, Information Security, Digital Assets, Technology Audit or Technology Risk Management, preferably within financial services, would generally be expected to find the skills required for this role
• Deep expertise in cybersecurity, cloud technologies, digital asset custody, cryptographic controls, blockchain and DLT platforms, operational resilience, and emerging cyber threats
• Demonstrated experience assessing cyber and information security risks and controls associated with digital assets (e.g., private-key and wallet security, cryptographic controls, smart contracts, blockchain infrastructure, third-party dependencies, transaction security, etc.)
• Relevant certifications (i.e., CISA, CISSP, CEH, OSCP, blockchain, cryptography, etc.) preferred

WHAT YOU CAN EXPECT FROM MORGAN STANLEY:

At Morgan Stanley, we raise, manage and allocate capital for our clients – helping them reach their goals. We do it in a way that’s differentiated – and we’ve done that for 90 years. Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren’t just beliefs, they guide the decisions we make every day to do what's best for our clients, communities and more than 80,000 employees in 1,200 offices across 42 countries. At Morgan Stanley, you’ll find an opportunity to work alongside the best and the brightest, in an environment where you are supported and empowered. Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences. We are proud to support our employees and their families at every point along their work‑life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry. There’s also ample opportunity to move about the business for those who show passion and grit in their work.

To learn more about our offices across the globe, please copy and paste https://www.morganstanley.com/about-us/global-offices into your browser.

Expected base pay rates for the role will be between $135,000 and $202,500 per year at the commencement of employment. However, base pay if hired will be determined on an individualized basis and is only part of the total compensation package, which, depending on the position, may also include commission earnings, incentive compensation, discretionary bonuses, other short and long‑term incentive packages, and other Morgan Stanley sponsored benefit programs.

Morgan Stanley is an equal opportunity employer committed to building and maintaining a workforce that is diverse in experience and background. Our recruiting efforts reflect our strong commitment to a culture of inclusion, where individuals are hired, developed, and advanced based on their skills and talents. Our workforce reflects a broad cross-section of the global communities in which we operate, bringing a variety of backgrounds, talents, perspectives, and experiences. For more information, please visit: https://www.morganstanley.com/people-opportunities/eeo.

At Morgan Stanley, we advise, originate, trade, manage and distribute capital for people, governments and institutions, always with a standard of excellence and guided by our core values. Morgan Stanley is dedicated to providing first‑class service to our clients, in a way that reflects our commitment to creating a more sustainable future and fostering stronger communities around the world. In each line of business, we strive to demonstrate our belief in the power of transformative thinking, innovative strategies and leading‑edge solutions—and in the ability of capital to work for the benefit of all society.