Digital Asset Cyber and Fraud Risk Specialist - Vice President

The Wealth Management (WM) Chief Data Office (CDO) sits within the WM Risk organization and strives to find the right balance between risk management and business enablement. WM CDO’s mission is to: prevent unauthorized access to or misuse of client sensitive data and assets; abide by relevant privacy laws and regulations; effectively retain, retrieve, and protect information and records at the Firm;

and mitigate risks caused by inaccurate, untimely, or incomplete WM data.

The WM Application Security Team within WM CDO works to ensure that our clients’ sensitive data and assets are protected and that appropriate controls are applied across technology assets, including emerging digital asset capabilities.

Role Description

The WM Application Security Team seeks a Vice President to support digital asset risk management across cyber and fraud domains. This individual will help assess and enhance the control environment for enterprise digital asset custody technologies, including wallet architecture, key protection, secure signing mechanisms, and transaction policy controls designed to prevent unauthorized or unwanted transactions. The successful candidate will bring hands-on knowledge of enterprise custody operating models and specific familiarity with Fireblocks implementation, including workspace configuration, policy design, approval workflows, and supporting control considerations.

In addition to serving as a digital asset cyber risk officer, this role will partner closely with fraud, product, operations, technology, and business stakeholders to identify and assess blockchain- and crypto-specific fraud scenarios across custody, transfer, and tokenized asset use cases. The individual should be comfortable reviewing technology architecture diagrams and process flows, understanding the fraud and cyber implications of tokenized assets, and translating complex technical concepts into clear risk guidance for senior stakeholders while balancing risk remediation against business objectives.

Key responsibilities include:

· Leading the risk assessment and control review of enterprise digital asset custody capabilities, including Fireblocks, wallet architecture, account structures, governance, and operating processes

· Serving as a subject matter expert on key protection and secure signing mechanisms, including MPC- and HSM-based models, key generation and storage, rotation and recovery practices, and privileged access controls

· Evaluating transaction policy controls designed to prevent unauthorized or unwanted transactions, including approval workflows, allowlisting, velocity or value thresholds, segregation of duties, and exception handling

· Partnering with cyber, fraud, product, operations, and engineering stakeholders to identify blockchain- and crypto-specific fraud typologies and define preventive and detective controls

· Reviewing technology architecture diagrams, data flows, and integration patterns to identify cyber, fraud, and control design risks across digital asset platforms and supporting services

· Assessing the risk implications of tokenized asset products and processes, including issuance, custody, transfer, redemption, settlement, and on-chain or off-chain dependencies

· Supporting new product, platform change, and third-party risk reviews for digital asset and tokenization initiatives, ensuring alignment to the WM business risk appetite

· Defining and tracking metrics related to control coverage, policy exceptions, incidents, fraud trends, remediation progress, and residual risk

· Liaising with Morgan Stanley’s central cybersecurity, fraud, and risk organizations to interpret requirements and apply them effectively within the WM environment

· Clearly communicating risks,…