Director, Third-Party Risk & Due Diligence

Morgan Stanley; Dallas (TX); On-site; USD 130,000 - 182,500; Full time

Job summary

Morgan Stanley is seeking a Director-level professional to support the Global Third-Party Program Management team. You will assess supplier controls, drive program improvements, and present findings to governance bodies.

This role emphasizes risk mitigation and resilience across external vendors. Ideal candidates bring 10+ years in information security or risk assessments within financial services, strong leadership, and collaboration across diverse stakeholders.

Qualifications

• Bachelor's degree required in Business Administration, Risk Management, or Business Continuity/Resilience.
• 10+ years in Information Security, Cybersecurity, Business Continuity or risk and control assessments in financial services.
• Professional qualifications from ISACA or similar are a plus.

Responsibilities

• Collaborate with Technology, Business Units, and Suppliers to evaluate supplier controls and evidence.
• Drive change management and streamline the assessment process.
• Lead continuous improvement initiatives for the due diligence program.
• Interpret risk and control issues and provide guidance on observations.
• Present findings to management and governance bodies and respond to regulatory requests.

Skills

Project management

Information security

Risk assessments

Industry standards (NIST CCM CRI)

Leadership

Stakeholder management

Education

Bachelor's degree in Business Administration, Risk Management, or Business Continuity/Resilience

Job description

Morgan Stanley is seeking a Director-level professional to support the Global Third-Party Program Management team. You will assess supplier controls, drive program improvements, and present findings to governance bodies.

This role emphasizes risk mitigation and resilience across external vendors. Ideal candidates bring 10+ years in information security or risk assessments within financial services, strong leadership, and collaboration across diverse stakeholders.