Digital Forensics Investigator - Vice President

We are seeking a Digital Forensics Investigator professional to join our Insider Risk Management function as a Digital Forensics Investigator and eDiscovery Specialist within Cyber, Data, Risk & Resilience (CDRR).

In the Insider Risk Management function we lead end‑to‑end investigations with a disciplined, risk‑based approach to evidence handling, proportionality, confidentiality, and regulatory defensibility. The successful candidate will engage with senior stakeholders across Legal, Corporate Security, Human Resources, Compliance, Cyber Security, Engineering teams, and Business Units, communicating complex technical matters clearly and effectively.

• Lead and conduct digital forensic investigations
• Collect, preserve, and analyze digital evidence from a broad range of sources
• Apply structured investigative methodologies to correlate activity across multiple data sources
• Exercise sound judgement and proportionality, ensuring investigations are conducted in line with Firm policies, legal requirements, and regulatory expectations
• Produce clear investigative outputs, including timelines, findings summaries, and threat mitigation recommendations

• Manage electronic discovery (eDiscovery) activities, including identification, preservation, collection, processing, and production of electronically stored information (ESI)
• Design and execute complex data‑collection criteria across email archives, collaboration platforms, file shares, and enterprise systems
• Ensure adherence to data minimization, privacy, retention, and jurisdictional requirements

• Act as a client-facing point of contact for investigation and eDiscovery matters, managing cases from intake through delivery and closure
• Partner with stakeholders to clarify objectives, define scope, assess risk, and set expectations around timelines and deliverables
• Coordinate across multiple teams and regions

• Analytical mindset with the ability to synthesize information into clear findings and conclusions
• Strong SIEM analysis and data correlation skills, with experience working through complex datasets, analyzing infrastructure and security logs
• Hands‑on experience with digital forensic tools
• Strong working knowledge of Microsoft 365 (M365) environments
• Ability to clearly articulate complex technical matters to diverse stakeholders
• Strong understanding of technology risk, security concepts, and enterprise infrastructure

• Proven experience in digital investigations, including insider risk, incident response, or data exfiltration scenarios
• Solid experience in eDiscovery, including message archive systems and formulation of complex search and collection criteria
• Experience working with Regulatory, Compliance, Litigation, or Investigations teams within the financial services industry
• Scripting, AI, or automation skills for investigative efficiency
• Experience working across multiple regions
• Relevant security certifications (e.g. GCFE, GCFA, CISSP)

Expected base pay rates for the role will be between $125,000 and $175,000 per year at the commencement of employment. Base pay will be determined on an individualized basis and is only part of the total compensation package, which may include commissions, incentive compensation, discretionary bonuses, and other sponsored benefit programs.

Morgan Stanley is an equal opportunity employer committed to building and maintaining a workforce that is diverse in experience and background. Our recruiting efforts reflect our strong commitment to a culture of inclusion, where individuals are hired, developed, and advanced based on their skills and talents.

Our workforce reflects a broad cross‑section of the global communities in which we operate, bringing a variety of backgrounds, talents, perspectives, and experiences.

For more information, please visit: