Director, Technology Audit
Morgan Stanley
Morgan Stanley Services Group, Inc. seeks a Director, Technology Audit in New York, New York
Responsible for validating whether the firm operates in a controlled environment with appropriate risk-management processes. Execute a portfolio of audit projects on applications, interfaces, system infrastructure, data processing and technology general controls. Perform risk assessments and execute tests of data processing system to ensure functioning of data processing activities and security measures. Partner with Technology and Business Auditors to complete risk assessments, control environment assessments, audit scheduling, audit planning, test plan development and execution, and audit issue documentation. Build strong relationships with both the Business Unit and Technology management and conduct on-going communication throughout the audit lifecycle. Execution of continuous monitoring and conduct ongoing risk assessments of key business processes to drive risk based audit plan. Present issues and other reports to management. Articulate actionable insights to management regarding criticality and impact of risks to the business. Execute and lead aspects of assurance activities (e.g., audits, continuous monitoring, closure verification) to assess risk and formulate a view on the control environment. Facilitate conversations with stakeholders on risks, their impact and how well they are managed in a clear, timely and structured manner. Test controls over applications and system infrastructure, including those over data accuracy, completeness and processing, systems development, vulnerability management, data security and entitlements, production management and technology governance, business continuity and disaster recovery, configuration and patch management, third party risk management (TPRM). Telecommuting permitted up to 1 day per week.
Salary:
Expected base pay rates for the role will be between $145,000 and $155,000 per year at the commencement of employment. However, base pay if hired will be determined on an individualized basis and is only part of the total compensation package, which, depending on the position, may also include commission earnings, incentive compensation, discretionary bonuses, other short and long-term incentive packages, and other Morgan Stanley sponsored benefit programs.
Requirements:
Requires a Master’s in Management Information Systems, Computer Engineering or a related field and two (2) years of experience in the position offered or two (2) years as a Software Engineer, Senior IT Auditor, Supervisor IT Auditor, or a related role. Requires two (2) years of experience with: Capital markets, electronic trading, and banking products in investment management; Applying audit principles, methodologies, tools, and processes; Conducting risk assessments, planning, testing, reporting, and continuous monitoring; Leveraging and analyzing data to inform focus and views on risk; IT general controls including incident management, IT change management and software development lifecycle, configuration and capacity management, incident access management (IAM) and privileged access management (PAM); Applying financial industry standards, regulations, and compliance requirements including NIST Cybersecurity Framework, PCI, ISO 27001, COBIT, SOC2, GLBA, Sarbanes Oxley (SOX), and FFIEC; Foundational security principles, and standard methodologies including end point protection, logging, data handling, authorization, authentication; SaaS and PaaS providers; Using data analytics; and Using MS Excel to evaluate data and inform focus and views on risk.
Qualified Applicants: To apply, visit us at https://morganstanley.eightfold.ai/careers?source=mscom and enter JR015027 in the search field. No calls please. EOE
WHAT YOU CAN EXPECT FROM MORGAN STANLEY:
We are committed to maintaining the first-class service and high standard of excellence that have defined Morgan Stanley for over 89 years. Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren’t just beliefs, they guide the decisions we make every day to do what's best for our clients, communities and more than 80,000 employees in 1,200 offices across 42 countries. At Morgan Stanley, you’ll find an opportunity to work alongside the best and the brightest, in an environment where you are supported and empowered. Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences. We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry. There’s also ample opportunity to move about the business for those who show passion and grit in their work.
To learn more about our offices across the globe, please copy and paste https://www.morganstanley.com/about-us/global-offices into your browser.
Morgan Stanley's goal is to build and maintain a workforce that is diverse in experience and background but uniform in reflecting our standards of integrity and excellence. Consequently, our recruiting efforts reflect our desire to attract and retain the best and brightest from all talent pools. We want to be the first choice for prospective employees.
It is the policy of the Firm to ensure equal employment opportunity without discrimination or harassment on the basis of race, color, religion, creed, age, sex, sex stereotype, gender, gender identity or expression, transgender, sexual orientation, national origin, citizenship, disability, marital and civil partnership/union status, pregnancy, veteran or military service status, genetic information, or any other characteristic protected by law.
Morgan Stanley is an equal opportunity employer committed to diversifying its workforce (M/F/Disability/Vet).