Global Cyber & InfoSec Audit Executive Lead

474 MS Services Group, Inc.; New York (NY); On-site; USD 165,000 - 275,000; Full time

Job summary

Morgan Stanley seeks an Executive Director to lead internal audit technology coverage across the global Firm and its banking entities. You will translate emerging cyber risks, AI developments, and frontier technologies into audit strategies, providing independent assurance and shaping the Firm's resilience posture.

The role requires deep cyber risk expertise, regulatory understanding, and ability to lead a global team while communicating with senior management and regulators.

Qualifications

• Advanced understanding of cybersecurity, information security, and cyber resilience risks and regulations.
• Experience translating rapidly changing threat landscapes into audit coverage.
• Strong knowledge of cybersecurity frameworks (NIST CSF, ISO 27001) and auditing identity, cloud security, and network architecture.

Responsibilities

• Lead coverage of emerging risks related to AI, frontier models, and digital assets across the Firm and its Banks.
• Direct execution of the audit plan across core cyber domains: IAM, endpoint security, network security, data protection.
• Oversee resilience capabilities, including incident response, DR/BCP, and third-party security.
• Provide independent assurance and prepare materials for Audit Committee and Board.

Skills

Cyber risk expertise

Audit leadership

Regulatory knowledge

Banking sector experience

Communication to executives

Education

Bachelor's degree in Information Security or related

Job description

Morgan Stanley seeks an Executive Director to lead internal audit technology coverage across the global Firm and its banking entities. You will translate emerging cyber risks, AI developments, and frontier technologies into audit strategies, providing independent assurance and shaping the Firm's resilience posture.

The role requires deep cyber risk expertise, regulatory understanding, and ability to lead a global team while communicating with senior management and regulators.