Global Cyber Risk Audit Director—AI, Cloud & Resilience

Morgan Stanley; New York (NY); On-site; USD 165,000 - 275,000; Full time

Job summary

Morgan Stanley seeks an Executive Director to lead internal audit technology coverage across the global Firm and its banking entities. This forward‑looking leader will translate AI, frontier tech, cloud, and digital asset risks into practical audit strategies and challenge management to strengthen controls.

The role requires deep cyber risk expertise, senior stakeholder communication, and the ability to oversee a global audit team, spanning infrastructure to data layers and multiple business

Qualifications

• Bachelor’s degree in Information Security or related field.
• 12–15 years of relevant IT/cyber audit and risk management experience, ideally in banking or financial services.
• Certifications such as CISA, CISSP, CISM or equivalent preferred.

Responsibilities

• Lead internal audit coverage of cyber risk, information security, and cyber resilience across Morgan Stanley and its banks.
• Translate evolving AI, cloud, and digital asset risk developments into practical audit coverage and strategies.
• Direct execution of audit plans for identity and access management, endpoint security, network security, data protection, and threat detection.
• Oversee incident response, disaster recovery, and third‑party/vendor security assurance.
• Articulate risk and remediation to senior management and regulators; prepare updates for Audit Committee and Board.

Skills

Cyber risk expertise

Audit leadership

Regulatory knowledge

Stakeholder communication

Framework knowledge

Education

Bachelor's degree in Information Security or related field

Job description

Morgan Stanley seeks an Executive Director to lead internal audit technology coverage across the global Firm and its banking entities. This forward‑looking leader will translate AI, frontier tech, cloud, and digital asset risks into practical audit strategies and challenge management to strengthen controls.

The role requires deep cyber risk expertise, senior stakeholder communication, and the ability to oversee a global audit team, spanning infrastructure to data layers and multiple business