Technology Audit Associate — Risk & Controls

Financeroles; Baltimore (MD); On-site; USD 86,000 - 127,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Job summary

Morgan Stanley in Baltimore seeks an Associate to provide audit coverage for Institutional Securities Technology Audit. The role supports the Internal Audit Division’s risk assessment and governance processes across multiple lines of business, with strong emphasis on data-driven analysis and stakeholder collaboration.

Located in Baltimore, the role requires 2+ years of relevant audit experience, knowledge of audit principles, and professional certifications such as CIA, CISA, or CISSP.

Qualifications

• Understanding of audit principles, tools and processes (risk assessments, planning, testing, reporting, continuous monitoring)
• Ability to communicate clearly and adapt messages to audience
• Identify patterns and anomalies in data
• Commitment to inclusive behaviors and collaboration

Responsibilities

• Execute audits, continuous monitoring, and closure verification
• Adopt new audit tools and techniques
• Develop clear messages regarding risk and business impact
• Leverage data to enhance coverage analysis
• Collaborate with internal stakeholders to deliver team outcomes
• Manage multiple deliverables while maintaining high quality

Skills

Audit principles

Data analysis

Clear communication

Inclusive behavior

Feedback willingness

2+ years experience

CIA/CISA/CISSP certifications

Education

CIA / CISA / CISSP certifications

Job description

Morgan Stanley in Baltimore seeks an Associate to provide audit coverage for Institutional Securities Technology Audit. The role supports the Internal Audit Division’s risk assessment and governance processes across multiple lines of business, with strong emphasis on data-driven analysis and stakeholder collaboration.

Located in Baltimore, the role requires 2+ years of relevant audit experience, knowledge of audit principles, and professional certifications such as CIA, CISA, or CISSP.