Director - Digital Assets Cybersecurity (Internal Audit)

Morgan Stanley • New York, NY

2d • Hybrid

About The Position

The Director provides audit coverage for application and system infrastructure supporting the Cybersecurity Management Technology Audit team, specializing in assurance activities across Digital Assets. The role sits within Morgan Stanley's Internal Audit Division (IAD), which independently assesses the quality and effectiveness of the Firm's internal controls, risk management, and governance systems and processes. As part of Technical Specialist Audit, the Director provides extensive subject matter expertise and helps business and technology audit teams assess risk and determine and execute coverage.

The position is based in New York, NY, with an expectation of working in the office four days per week. The Director formulates and leads assurance activities, identifies current and emerging risks, communicates actionable risk insights to management, partners with global colleagues and stakeholders, and oversees the team's work in accordance with audit methodology and quality standards.

Requirements

• At least 6 years of relevant experience in Cyber, Information Security, Digital Assets, Technology Audit, or Technology Risk Management; experience in financial services is preferred.
• Advanced knowledge of the industry, global markets, and regulations relevant to Cybersecurity and Digital Assets.
• Strong understanding of audit principles, methodology, tools, and processes, including risk assessments, planning, testing, reporting, and continuous monitoring.
• Ability to clearly and succinctly articulate risk and impact to different audiences.
• Effective change- and project-management techniques, with the ability to support teams in adapting to new ways of working.
• Ability to leverage and analyze data to inform risk focus and views.
• Deep expertise in cybersecurity, cloud technologies, digital asset custody, cryptographic controls, blockchain and DLT platforms, operational resilience, and emerging cyber threats.
• Demonstrated experience assessing cybersecurity and information-security risks and controls associated with digital assets, including private-key and wallet security, cryptographic controls, smart contracts, blockchain infrastructure, third-party dependencies, and transaction security.

Nice To Haves

• Relevant certifications, such as CISA, CISSP, CEH, OSCP, or certifications in blockchain or cryptography.
• Relevant experience within financial services.

Responsibilities

• Formulate and lead assurance activities to assess risks within the coverage area and the state of controls in place to mitigate them.
• Proactively identify current and emerging risks and incorporate them into assurance coverage.
• Communicate actionable insights to management about the criticality and business impact of risks.
• Partner effectively with colleagues and stakeholders globally.
• Align projects and initiatives with department and coverage-area priorities.
• Oversee the team's execution of deliverables in accordance with audit methodology and quality standards.
• Provide subject matter expertise to business and technology audit teams to support risk assessment and audit coverage.
• Coach and mentor others and foster an inclusive work environment.

Benefits

• Comprehensive employee benefits and perks.
• Benefit programs and support for employees and their families throughout their work-life journey.
• Opportunities to move across the business.

What This Job Offers

• Job Type: Full-time
• Career Level: Director
• Education Level: No Education Listed