Director - Digital Assets Cybersecurity (Internal Audit)

Morgan Stanley; New York (NY); Hybrid; USD 135,000 - 203,000; Full time

Job summary

Morgan Stanley is seeking a Director-level auditor to lead coverage of Cybersecurity Management Technology and Digital Assets. You will drive assurance activities, assess risks, and deliver actionable insights to senior management from New York, with four in-office days."

Demonstrated expertise in cybersecurity, cloud technologies, cryptographic controls, and blockchain is required, along with relevant certifications and a strong track record in financial services risk management.

Qualifications

• Advanced knowledge of industry, global markets, and regulations relevant to Cybersecurity and Digital Assets.
• Strong understanding of audit principles, methodology, tools, and processes (e.g., risk assessments, planning, testing, reporting and continuous monitoring).
• Ability to articulate risk and impact clearly to different audiences.
• Experience coaching and mentoring others and creating an inclusive team environment.
• At least 6 years' relevant experience in Cyber, Information Security, Digital Assets, Technology Audit or Technology Risk Management.

Responsibilities

• Formulate and lead a wide range of assurance activities to assess risks within coverage area and the state of controls in place to mitigate them.
• Proactively identify risk and emerging risk, and factor into assurance coverage.
• Articulate actionable insights to management regarding criticality and impact of risks to the business.
• Effectively partner with colleagues and stakeholders globally to drive effective working relationships.
• Align projects and initiatives with department and coverage area priorities, and oversee team's execution of deliverables in accordance with audit methodology and quality standards.

Skills

Cybersecurity

Digital Assets

Risk assessments

Audit methodology

Data analysis

Stakeholder management

Project management

Mentoring

Cloud technologies

Cryptography

Job description

We are seeking a highly skilled and experienced Director to provide audit coverage for application and system infrastructure supporting the Cybersecurity Management Technology Audit team, specializing in assurance activities across Digital Assets.

The Internal Audit Division (IAD) drives attention and resources to vulnerabilities by providing an independent and well-informed view and impactful messages about the most important risks facing our Firm. This is accomplished by performing a range of assurance activities to independently assess the quality and effectiveness of Morgan Stanley's system of internal control, including risk management and governance systems and processes. IAD serves as an objective and independent function within the Firm's risk management framework to foster continual improvement of risk management processes. This is a Director level position within Technical Specialist Audit, which is responsible for providing extensive subject matter expertise and reinforcing the ability of business and technology audit teams to appropriately assess risk and determine and execute coverage.

Since 1935, Morgan Stanley is known as a global leader in financial services, always evolving and innovating to better serve our clients and our communities in more than 40 countries around the world.

Location : New York, NY (4x per week in office)

What you'll do in the role :

• Formulate and lead a wide range of assurance activities to assess risks within coverage area and the state of controls in place to mitigate them
• Proactively identify risk and emerging risk, and factor into assurance coverage
• Articulate actionable insights to management regarding criticality and impact of risks to the business
• Effectively partner with colleagues and stakeholders globally to drive effective working relationships
• Align projects and initiatives with department and coverage area priorities, and oversee team's execution of deliverables in accordance with audit methodology and quality standards

What you’ll bring to the role :

• Advanced knowledge of industry, global markets, and regulations relevant to Cybersecurity and Digital Assets
• Strong understanding of audit principles, methodology, tools, and processes (e.g., risk assessments, planning, testing, reporting and continuous monitoring)
• Ability to articulate risk and impact clearly and succinctly to different audiences
• Effective change and project management techniques and ability to support teams in adapting new ways of working
• Ability to leverage and analyze data to inform focus and views on risk
• Ability to coach and mentor others and create an inclusive work environment for team
• At least 6 years' relevant experience in Cyber, Information Security, Digital Assets, Technology Audit or Technology Risk Management, preferably within financial services, would generally be expected to find the skills required for this role
• Deep expertise in cybersecurity, cloud technologies, digital asset custody, cryptographic controls, blockchain and DLT platforms, operational resilience, and emerging cyber threats
• Demonstrated experience assessing cyber and information security risks and controls associated with digital assets (e.g., private-key and wallet security, cryptographic controls, smart contracts, blockchain infrastructure, third-party dependencies, transaction security, etc.)
• Relevant certifications (i.e., CISA, CISSP, CEH, OSCP, blockchain, cryptography, etc.) preferred

What you can expect from Morgan Stanley :

At Morgan Stanley, we raise, manage and allocate capital for our clients - helping them reach their goals. We do it in a way that's differentiated - and we've done that for 90 years. Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren't just beliefs, they guide the decisions we make every day to do what's best for our clients, communities and more than 80,000 employees in 1,200 offices across 42 countries. At Morgan Stanley, you'll find an opportunity to work alongside the best and the brightest, in an environment where you are supported and empowered. Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences. We are proud to support our employees and their families at every point along their work‑life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry. There's also ample opportunity to move about the business for those who show passion and grit in their work.

To learn more about our offices across the globe, please copy and paste https://www.morganstanley.com/about-us/global-offices into your browser.

Expected base pay rates for the role will be between $135,000 and $202,500 per year at the commencement of employment. However, base pay if hired will be determined on an individualized basis and is only part of the total compensation p