Vice President, Cyber, Technology and Information Security (CTIS) Risk Oversight Lead

Morgan Stanley; New York (NY); On-site; USD 120,000 - 210,000; Full time

Job summary

Morgan Stanley in New York seeks a Vice President for CTIS Risk Oversight to lead a team focused on independent oversight of cyber, technology and information security risks, covering IT resilience, architecture, asset management, vulnerability management, IAM, and change management.

The role requires strong leadership, extensive risk experience, and the ability to build relationships with Technology, Legal, Audit, and business stakeholders.

Qualifications

• Bachelor’s degree in STEM or Information Security; advanced degree preferred
• 10+ years of technology and/or security risk experience, preferably in financial services
• Strong leadership and stakeholder management skills
• Excellent written and verbal communication; tailored toTechnical/non-technical audiences
• Proven project management and organizational abilities
• Ability to work under pressure and meet tight deadlines

Responsibilities

• Provide independent oversight and challenge of the Firm's cybersecurity and technology risk management activities.
• Manage the team in assessing effectiveness of risk and control frameworks for new tech infrastructure, applications, cyber defenses, and information security programs.
• Lead reviews of risk assessments, control evaluations, issue remediation plans, and risk acceptance decisions.
• Build strong relationships with Technology, Non-Financial Risk, Legal, Audit, and business stakeholders to address emerging risks.
• Evaluate new tech initiatives and transformation programs from a risk perspective.
• Monitor KRIs, metrics, and trends to identify where oversight is needed.
• Support regulatory examinations, internal audits, and governance reporting.
• Drive consistency in risk management practices and ensure policy compliance.
• Prepare executive risk reporting and present to senior management and risk forums.
• Contribute to Enterprise Risk Management and NFR program enhancements.
• Provide thought leadership on emerging tech, cyber threats, and regulatory developments.

Skills

Leadership

Stakeholder management

Communication

Project management

Analytical thinking

MS Office

Education

Bachelor’s degree in STEM or Information Security

Tools

MS Office

Job description

Morgan Stanley is seeking a Vice President, Cyber, Technology and Information Security (CTIS) Risk Oversight Lead in the CTIS team within Non-Financial Risk.

The successful candidate will be responsible for leading a team focused on independent oversight and monitoring of risks and controls around the Firm's cyber, technology and information security risks, with a focus on areas including IT resilience, architecture and design, asset management, vulnerability and patch management, cyber threat intelligence, network security, IAM, change management, and other related areas. The ideal candidate will bring operational knowledge and experience paired with a strong risk and control lens.

Since 1935, Morgan Stanley is known as a global leader in financial services, always evolving and innovating to better serve our clients and our communities in more than 40 countries around the world.

What You'll Do In The Role

• Provide independent oversight and challenge of the Firm's cybersecurity and technology organizations risk management activities.
• Manage the team in assessing the effectiveness of risk and control frameworks supporting new technology infrastructure, applications, cyber defenses, and information security programs.
• Lead the team in review and challenge of risk assessments, control evaluations, issue remediation plans, and risk acceptance decisions.
• Build and maintain strong positive relationships and partner with Technology, Non-Financial Risk, Legal, Audit, and business stakeholders to identify and address emerging risks.
• Evaluate new technology initiatives and strategic transformation programs from a risk perspective.
• Manage the team in monitoring key risk indicators (KRIs), metrics, and trends to identify areas requiring enhanced oversight or escalation.
• Support regulatory examinations, internal audits, and governance committee reporting related to technology and cyber risk.
• Drive consistency in risk management practices, ensuring policy requirements, governance standards, and other risk guidance are appropriately addressed.
• Manage the team in preparing executive-level risk reporting and deliver presentations for senior management and at risk governance forums.
• Contribute to the development and enhancement of Enterprise Risk Management and NFR programs.
• Provide thought leadership on emerging technology, cyber threats, and regulatory developments.

What You'll Bring To The Role

• College degree (STEM or Information Security, preferable but not essential)
• 10+ years of technology and or security risk related work experience, preferably in the financial services industry
• Experience in Technology (IT) Risk Management and/or Technology (IT) Audit including Information Security and or Cyber Security
• Strong leadership, people management, stakeholder management and influencing skills
• Strong interpersonal skills to work in a team-oriented environment
• Excellent communication skills, both verbal and written; ability to produce concise and effective presentations tailored to technical and non-technical audiences
• Strong project management and organization skills
• Ability to multitask and prioritize
• Ability to work under pressure and to tight deadlines
• Flexible and self-motivator
• Strong analytical and problem-solving skills
• Proficiency in MS Office and related applications (e.g. Word, Excel, Powerpoint)

What You Can Expect From Morgan Stanley

At Morgan Stanley, we raise, manage and allocate capital for our clients - helping them reach their goals. We do it in a way that is differentiated - and we've done that for 90 years. Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren't just beliefs, they guide the decisions we make every day to do what's best for our clients, communities and more than 80,000 employees in 1,200 offices across 42 countries. At Morgan Stanley, you'll find an opportunity to work alongside the best and the brightest, in an environment where you are supported and empowered. Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences. We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry. There's also ample opportunity to move about the business for those who show passion and grit in their work.

To learn more about our offices across the globe, please copy and paste https://www.morganstanley.com/about-us/global-offices into your browser.

Expected base pay rates for the role will be between $120000 and $210000 per year at the commencement of employment. However, base pay if hired will be determined on an individualized basis and is only part of the total compensation package, which, depending on the position, may also include commission earnings, incentive compensation, discretionary bonuses, other short and long-term incentive packages, and other Morgan Stanley sponsored benefit programs.

Morgan Stanley is an equal opportunity employer committed to building and maintaining a workforce that is diverse in experience and background. Our recruiting efforts reflect our strong commitment to a culture of inclusion, where individuals are hired, developed, and advanced based on their skills and talents.

Our workforce reflects a broad cross-section of the global communities in which we operate, bringing a variety of backgrounds, talents, perspectives, and experiences.

For more information, please visit: https://www.morganstanley.com/people-opportunities/eeo.