VP, Cyber & IT Security Risk Oversight Leader

Socket.dev; New York (NY); On-site; USD 120,000 - 210,000; Full time

Job summary

Morgan Stanley is seeking a Vice President, CTIS Risk Oversight Lead to direct a team focused on independent oversight of cyber, technology and information security risks. You will lead risk assessments, monitor KRIs, and engage with Technology, Legal, Audit and business partners to address emerging risks.

The role emphasizes governance, reporting to senior management, and collaboration across Enterprise Risk Management and NFR programs within a global financial services leader.

Qualifications

• Bachelor’s degree in a relevant field or equivalent experience.
• 10+ years of technology or security risk work experience.
• Experience in technology risk management and/or IT audit incl. information security.

Responsibilities

• Provide independent oversight and challenge of cyber and technology risk management activities.
• Lead a team in assessing effectiveness of risk and control frameworks for IT resilience, security programs.
• Review risk assessments, control evaluations, remediation plans and risk acceptance decisions.
• Build relationships with Technology, Non-Financial Risk, Legal, Audit and business stakeholders.
• Monitor KRIs, metrics and trends to identify areas for enhanced oversight.
• Support regulatory examinations, internal audits and governance reporting.
• Drive consistency in risk management practices and policy adherence.
• Prepare executive-level risk reporting for senior management and risk committees.
• Contribute to Enterprise Risk Management and NFR program development.
• Provide thought leadership on emerging technology, cyber threats, and regulatory developments.

Skills

Leadership

Stakeholder management

Communication

Project management

Multitasking

Analytical skills

MS Office

Education

Bachelor's degree in STEM or Information Security

Tools

IT Audit Tools

Job description

Morgan Stanley is seeking a Vice President, CTIS Risk Oversight Lead to direct a team focused on independent oversight of cyber, technology and information security risks. You will lead risk assessments, monitor KRIs, and engage with Technology, Legal, Audit and business partners to address emerging risks.

The role emphasizes governance, reporting to senior management, and collaboration across Enterprise Risk Management and NFR programs within a global financial services leader.