Vice President, Enterprise Advisory

Morgan Stanley•New York, NY

18h•$200,000 - $205,000•Hybrid

About The Position

Morgan Stanley Services Group, Inc. is seeking a Vice President, Enterprise Advisory in New York, New York to identify, assess, capture, and report on Cyber, Technology and Information Security risk and risk mitigation activities. Partner with relevant Technology, Business Units, and other Corporate and Infrastructure functions to develop a perspective on operational risk and ensure consideration of evolving regulatory expectation. Work with first line of defense in discussing and resolving control gaps, risk trends, risk issues, and incidents while also providing credible challenge of their assertions, assumptions, and conclusions. Coordinate with second line of defense colleagues in the department who cover business units and support functions in assessing the impact of disruption risks as they relate business and support processes. Participate in relevant governance, steering, and working group committees. Conduct risk assessments, perform critical analysis, and monitor data used to identify heightened risk and help develop risk remediation recommendations. Contribute to the development of presentations for executive management and senior risk managers, including reporting to boards and committees. Perform deep dives into material operational risk events (internal and external) and analyses of thematic operational risks. Contribute to Scenario Analyses activities where significant and emerging risks are assessed. Oversee execution of the New Product Assessment (NPA) for Cyber, Technology and Information Security components. Telecommuting permitted up to 2 days per week.

Requirements

Requires a Bachelor’s degree in Electronic Engineering, Financial Engineering, or a related field of study
Requires five (5) years of experience in the position offered or five (5) years as a Technical Architect, Client Contact Manager, Senior Consultant, or a closely related occupation
Requires five (5) years of experience with the following skills: Cyber, Technology, and Information Security risk assessment; Third-Party Cyber Risk Management; IT Audit; performing risk assessments and overseeing the subsequent risk remediation; developing and monitoring risk metrics in Technology; Incident Management, Technology Risk Management, and Capacity Management; regulatory and industry frameworks including Gamm Leach Bliley Act, and National Institute of Standards and Technology; Governance, Risk, and Compliance platforms including Archer, OneTrust, Architect, Web Application Assessment, and Penetration Testing; creating and managing comprehensive risk reports to present key metrics and trends, supporting risk management, and decision-making processes; compliance with regulatory legal requirements and mandates by delivering accurate and timely reports in response to regulatory inquiries; providing subject matter recommendations based on risk analysis; Microsoft Excel including vlookup, index, match, sum, countifs, time functions, and Pivot Table; and creating presentation materials using Microsoft PowerPoint.

Responsibilities

Identify, assess, capture, and report on Cyber, Technology and Information Security risk and risk mitigation activities.
Partner with relevant Technology, Business Units, and other Corporate and Infrastructure functions to develop a perspective on operational risk and ensure consideration of evolving regulatory expectation.
Work with first line of defense in discussing and resolving control gaps, risk trends, risk issues, and incidents while also providing credible challenge of their assertions, assumptions, and conclusions.
Coordinate with second line of defense colleagues in the department who cover business units and support functions in assessing the impact of disruption risks as they relate business and support processes.
Participate in relevant governance, steering, and working group committees.
Conduct risk assessments, perform critical analysis, and monitor data used to identify heightened risk and help develop risk remediation recommendations.
Contribute to the development of presentations for executive management and senior risk managers, including reporting to boards and committees.
Perform deep dives into material operational risk events (internal and external) and analyses of thematic operational risks.
Contribute to Scenario Analyses activities where significant and emerging risks are assessed.
Oversee execution of the New Product Assessment (NPA) for Cyber, Technology and Information Security components.