Lead Cybersecurity Eng - Director

Morgan Stanley • Edison, NJ

4d

About The Position

In the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities. This is a Lead Cyber Security Engineering position at the Director level, which is part of the job family responsible for providing specialist cyber expertise and creating solutions that protect the organization's systems and networks against actual and potential security threats and vulnerabilities. Morgan Stanley is an industry leader in financial services, known for mobilizing capital to help governments, corporations, institutions, and individuals around the world achieve their financial goals. Interested in joining a team that’s eager to create, innovate and make an impact on the world? Read on. Business Information Security & Risk Management (BISRM) Team Profile: BISRM Team enables the Business and Technology to form a holistic view of identified risk and collaboratively make risk-based while still enabling and ensuring velocity for the business. In addition to advising Technology Senior Managers on their risk posture, the team is also responsible for enabling Technology divisions to proactively embed and align security, governance and compliance through the implementation of solutions based on the firm’s security policies and controls. The team advises on the firm’s Technology Policy & Standards, perform risk assessments and tests of controls, and deliver risk-reporting capabilities. The team handles responses to regulatory, audit, and client inquiries about the Firm’s technology risk, control framework, and fulfill Technology Risk Governance Committee responsibilities. What you'll do in the role: The Cloud Security Engineer is responsible for designing, implementing, and supporting Morgan Stanley Investment Management including but not limited to AWS & Azure environments. They work as a part of the larger Cloud Security and Risk Management organization consisting of Compliance, Governance and Security functions to build effective, secure and scalable solutions. This is a highly technical role focused on driving integration and convergence efforts across cloud service provider environments. This person will work closely with Morgan Stanley and legacy stakeholders to align security requirements and reduce risk within our development pipelines. What you'll bring to the role: Bachelor’s degree in computer science, information assurance, related field or equivalent experience 8+ years of information security experience with focus on application and infrastructure focus Expertise in cloud security regarding infrastructure and application development within AWS and Azure cloud security providers Experience in DevOps/CICD pipeline and AWS and Azure cloud security providers Experience with compliance requirements and audit engagements (GLBA, SOX, SOC, regulatory agencies, and Internal Audit etc.) Ability to effectively communicate business risk as it relates to information security Experience managing stakeholders (strong communication & influencing skills) Experience of technical leadership (architecture, design, implementing modern development practices, acts with integrity in meeting tight deadlines) Knowledge of multiple computing platforms, including Windows, OSX, Linux, Unix, networks and endpoints Experience with configuration management, change management, project management methodologies and tools including Cherwell or ServiceNow WHAT YOU CAN EXPECT FROM MORGAN STANLEY: At Morgan Stanley, we raise, manage and allocate capital for our clients – helping them reach their goals. We do it in a way that’s differentiated – and we’ve done that for 90 years. Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren’t just beliefs, they guide the decisions we make every day to do what's best for our clients, communities and more than 80,000 employees in 1,200 offices across 42 countries. At Morgan Stanley, you’ll find an opportunity to work alongside the best and the brightest, in an environment where you are supported and empowered. Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences. We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry. There’s also ample opportunity to move about the business for those who show passion and grit in their work. To learn more about our offices across the globe, please copy and paste https://www.morganstanley.com/about-us/global-offices into your browser. Morgan Stanley's goal is to build and maintain a workforce that is diverse in experience and background but uniform in reflecting our standards of integrity and excellence. Consequently, our recruiting efforts reflect our desire to attract and retain the best and brightest from all talent pools. We want to be the first choice for prospective employees. It is the policy of the Firm to ensure equal employment opportunity without discrimination or harassment on the basis of race, color, religion, creed, age, sex, sex stereotype, gender, gender identity or expression, transgender, sexual orientation, national origin, citizenship, disability, marital and civil partnership/union status, pregnancy, veteran or military service status, genetic information, or any other characteristic protected by law. Morgan Stanley is an equal opportunity employer committed to diversifying its workforce (M/F/Disability/Vet).

Requirements

• Bachelor’s degree in computer science, information assurance, related field or equivalent experience
• 8+ years of information security experience with focus on application and infrastructure focus
• Expertise in cloud security regarding infrastructure and application development within AWS and Azure cloud security providers
• Experience in DevOps/CICD pipeline and AWS and Azure cloud security providers
• Experience with compliance requirements and audit engagements (GLBA, SOX, SOC, regulatory agencies, and Internal Audit etc.)
• Ability to effectively communicate business risk as it relates to information security
• Experience managing stakeholders (strong communication & influencing skills)
• Experience of technical leadership (architecture, design, implementing modern development practices, acts with integrity in meeting tight deadlines)
• Knowledge of multiple computing platforms, including Windows, OSX, Linux, Unix, networks and endpoints
• Experience with configuration management, change management, project management methodologies and tools including Cherwell or ServiceNow

Responsibilities

• The Cloud Security Engineer is responsible for designing, implementing, and supporting Morgan Stanley Investment Management including but not limited to AWS & Azure environments.
• They work as a part of the larger Cloud Security and Risk Management organization consisting of Compliance, Governance and Security functions to build effective, secure and scalable solutions.
• This is a highly technical role focused on driving integration and convergence efforts across cloud service provider environments.
• This person will work closely with Morgan Stanley and legacy stakeholders to align security requirements and reduce risk within our development pipelines.

What This Job Offers

• Job Type: Full-time
• Career Level: Director
• Number of Employees: 5,001-10,000 employees