Global Lead Security Control Engineer

Morgan Stanley•Edison, NJ

3d•Onsite

About The Position

In the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities. This is a Global Lead security control Engineering position at Vice President level, which is part of the job family responsible for providing specialist cyber expertise and creating solutions that protect the organization's systems and networks against actual and potential security threats and vulnerabilities. Morgan Stanley is an industry leader in financial services, known for mobilizing capital to help governments, corporations, institutions, and individuals around the world achieve their financial goals. Interested in joining a team that’s eager to create, innovate and make an impact on the world? Read on. The Global Lead security control Engineer is responsible for leading a global team that provides 24x7 operational support for web application security platforms and services. This role oversees incident management, change governance, application onboarding, operational readiness, and continuous service improvement while ensuring the security, availability, and resilience of critical business applications. The Global Lead security control Engineer drives operational excellence through effective team leadership, process optimization, stakeholder engagement, and strategic planning. The role serves as a key liaison between Security Engineering, Application Development teams, Operations teams, and external vendors to ensure security controls are implemented, maintained, and operated effectively.

Requirements

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field.
7+ years of experience in Technology Operations, Cybersecurity Operations, or Infrastructure Operations.
3+ years of people leadership and team management experience.
Experience managing incident response, operational escalations, and production support teams.
Strong understanding of change management, service management, and operational governance practices.
Excellent communication, stakeholder management, and organizational skills.

Nice To Haves

Experience with Web Application Firewalls (WAF), Bot Management, DDoS mitigation, API Security, or Edge Security technologies.
Experience working with Akamai, Cloud Security, or enterprise security platforms.
Knowledge of ITIL, Incident Management, Problem Management, and Change Management frameworks.
Familiarity with ServiceNow, JIRA, Splunk, and enterprise monitoring tools.
Relevant industry certifications (ITIL, CISSP, CISM, Security+, PMP, Agile, or equivalent)

Responsibilities

Lead, mentor, and grow a high-performing Security Operations team.
Oversee WAF, DDoS protection, bot mitigation, API security, and related security platforms.
Drive incident response, problem management, and service reliability across critical applications.
Manage change and release processes, ensuring secure and seamless deployments.
Lead application onboarding and implementation of enterprise security controls.
Establish operational standards, documentation, runbooks, and service delivery processes.
Ensure compliance with security policies, regulatory requirements, and audit standards.
Monitor platform performance, risks, and operational metrics to drive improvements.
Partner with engineering, infrastructure, business teams, and vendors to deliver secure solutions.
Communicate operational risks, incidents, and strategic updates to senior leadership.
Drive automation, operational efficiency, and continuous process improvement.
Define KPIs, operational roadmaps, and long-term security operations strategy.