Director - Digital Assets Cybersecurity; Internal Audit

We are seeking a highly skilled and experienced Director to provide audit coverage for application and system infrastructure supporting the Cybersecurity Management Technology Audit team, specializing in assurance activities across Digital Assets.

The Internal Audit Division (IAD) drives attention and resources to vulnerabilities by providing an independent and well-informed view and impactful messages about the most important risks facing our Firm. This is accomplished by performing a range of assurance activities to independently assess the quality and effectiveness of Morgan Stanley’s system of internal control, including risk management and governance systems and processes.

IAD serves as an objective and independent function within the Firm’s risk management framework to foster continual improvement of risk management processes. This is a Director level position within Technical Specialist Audit, which is responsible for providing extensive subject matter expertise and reinforcing the ability of business and technology audit teams to appropriately assess risk and determine and execute coverage..Since

1935, Morgan Stanley is known as a global leader in financial services, always evolving and innovating to better serve our clients and our communities in more than 40 countries around the world.

Location :
New York, NY (4x per week in office)
What you'll do in the role :

- Formulate and lead a wide range of assurance activities to assess risks within coverage area and the state of controls in place to mitigate them
- Proactively identify risk and emerging risk, and factor into assurance coverage
- Articulate actionable insights to management regarding criticality and impact of risks to the business
- Effectively partner with colleagues and stakeholders globally to drive effective working relationships
- Align projects and initiatives with department and coverage area priorities, and oversee team's execution of deliverables in accordance with audit methodology and quality standards

What you'll bring to the role:

- Advanced knowledge of industry, global markets, and regulations relevant to Cybersecurity and Digital Assets
- Strong understanding of audit principles, methodology, tools, and processes (e.g., risk assessments, planning, testing, reporting and continuous monitoring)- Ability to articulate risk and impact clearly and succinctly to different audiences
- Effective change and project management techniques and ability to support teams in adapting new ways of working
- Ability to leverage and analyze data to inform focus and views on risk
- Ability to coach and mentor others and create an inclusive work environment for team
- At least 6 years' relevant experience in Cyber, Information Security, Digital Assets, Technology Audit or Technology Risk Management, preferably within financial services, would generally be expected to find the skills required for this role
- Deep expertise in cybersecurity, cloud technologies, digital asset custody, cryptographic controls, blockchain and DLT platforms, operational resilience, and emerging cyber threats
- Demonstrated experience assessing cyber and information security risks and controls associated with digital assets (e.g., private-key and wallet security, cryptographic controls, smart contracts, blockchain infrastructure, third-party dependencies, transaction security, etc.)-Relevant certifications (i.e., CISA, CISSP, CEH, OSCP, blockchain, cryptography, etc.) preferredWHAT YOU CAN EXPECT FROM MORGAN STANLEY:

At Morgan Stanley, we raise, manage and allocate capital for our clients – helping them reach their goals. We do it in a way that’s differentiated – and we’ve done that for 90 years. Our values - putting clients first, doing the right thing,…