Director - Digital Assets Cybersecurity (Internal Audit)

Morgan Stanley • New York, NY

1d • $135,000 - $202,500 • Hybrid

About The Position

Morgan Stanley is seeking a Director to provide audit coverage for application and system infrastructure supporting the Cybersecurity Management Technology Audit team, with a focus on assurance activities across Digital Assets. The position is part of the Internal Audit Division (IAD), which independently assesses the quality and effectiveness of the Firm’s internal controls, including risk management and governance systems and processes. This Director-level role within Technical Specialist Audit provides subject matter expertise and supports business and technology audit teams in assessing risk and determining and executing coverage.

The role is based in New York, NY, with an expectation to work in the office four days per week. The Director leads assurance activities, identifies current and emerging risks, communicates actionable insights to management, partners with global stakeholders, and oversees the team's execution of audit work in accordance with methodology and quality standards.

Requirements

• Advanced knowledge of industry, global markets, and regulations relevant to cybersecurity and digital assets.
• Strong understanding of audit principles, methodology, tools, and processes, including risk assessments, planning, testing, reporting, and continuous monitoring.
• Ability to articulate risk and its impact clearly and succinctly to different audiences.
• Knowledge of effective change and project management techniques and the ability to support teams in adapting to new ways of working.
• Ability to leverage and analyze data to inform risk focus and views.
• At least 6 years of relevant experience in Cyber, Information Security, Digital Assets, Technology Audit, or Technology Risk Management; financial services experience is preferred.
• Deep expertise in cybersecurity, cloud technologies, digital asset custody, cryptographic controls, blockchain and DLT platforms, operational resilience, and emerging cyber threats.
• Demonstrated experience assessing cybersecurity and information security risks and controls associated with digital assets, such as private-key and wallet security, cryptographic controls, smart contracts, blockchain infrastructure, third-party dependencies, and transaction security.

Nice To Haves

• Relevant certifications such as CISA, CISSP, CEH, OSCP, or certifications in blockchain or cryptography.
• Experience in financial services.

Responsibilities

• Formulate and lead assurance activities to assess risks in the coverage area and the effectiveness of controls in place to mitigate them.
• Proactively identify current and emerging risks and incorporate them into assurance coverage.
• Communicate actionable insights to management about the criticality and business impact of risks.
• Partner effectively with colleagues and stakeholders globally.
• Align projects and initiatives with department and coverage-area priorities.
• Oversee the team's execution of deliverables in accordance with audit methodology and quality standards.
• Coach and mentor others and help create an inclusive team environment.

Benefits

• Comprehensive employee benefits and perks.
• Potential commission earnings, incentive compensation, discretionary bonuses, and other short- and long-term incentive packages, depending on the position.
• Opportunity to move across the business.

What This Job Offers

• Job Type: Full-time
• Career Level: Director
• Education Level: No Education Listed