Division: U.S. Banks Non-Financial Risk Operational Risk Department (ORD)

Locations:  Baltimore, MD  |  Alpharetta, GA

Morgan Stanley is a leading global financial services firm providing a wide range of investment banking, securities, investment management and wealth management services. The Firm's employees serve clients worldwide including corporations, governments, and individuals from more than 1,200 offices in 43 countries.

Legal and Compliance Division Overview

The professionals in the Legal and Compliance Division LCD provide a wide range of services to our business units. LCD is made up of the Legal, Regulatory Relations, and Non-Financial Risk departments which preserve the firm's invaluable reputation for integrity and protect the firm from sanctions with policies and procedures that are designed to meet regulatory requirements around the world.

Background

The role will reside within the U.S. Banks Non-Financial Risk's Operational Risk Department (ORD) focusing on Emerging Technology Risk Oversight.

Operational Risk refers to the risk of financial or other loss, or potential damage to a firm's reputation, resulting from inadequate or failed internal processes, people, systems, or from external events (e.g., fraud, legal and compliance risks or damage to physical assets). The Firm may incur operational risk across the full scope of its business activities, including revenue-generating activities and control groups.

 Emerging technology Risk Oversight is the practice of identifying, assessing, and helping to remediate risks to the confidentiality, availability and integrity of the U.S. Banks systems and information, including associated processes and controls, that are posed by the U.S. Banks or Bank's vendors' use of Emerging technology. The successful candidate will be responsible for helping execute independent oversight, analysis, and monitoring of risks and controls around the U.S. Banks emerging technology strategy.

Primary Responsibilities

-  Manage the process to define, socialize, and gain approval for the Emerging technology risk appetite statement.
-  Identify and evaluate risks to the U.S. Bank's information and infrastructure related to the U.S. Bank's use of Emerging technology services with focus on both the U.S Bank's direct use of Emerging technology services and the use of Emerging technology by the U.S. Bank's key vendors.
-  Assess whether Emerging technology risk management controls are designed and implemented effectively to verify that risks presented by the U.S. Bank's and the Bank's vendors use of Emerging technology are mitigated to targeted levels.
-  Provide subject-matter expertise in Emerging technology risk management to support overall risk management in the U.S. Banks, working closely with cybersecurity and technology personnel, as well as the broader risk community across the U.S. Bank.
-  Review completeness and execution of relevant procedures and assess assurance mechanisms for how effectively they identify weaknesses or failures of key controls.
-  Work with risk and control owners in assessing inherent and residual levels risks based on structured risk framework.
-  Maintain and or contribute to relevant policies and procedures related to Emerging technology and security processes.
-  Review metrics and escalation reports to monitor risk and control-related developments, issues, and trends.
-  Review technology and security risk issues as well as internal and external incidents to help inform an independent view of the overall technology and security risk posture of the Firm.
-  Provide monthly and quarterly Emerging technology risk reporting.
-  Provide guidance on the evolving Emerging technology risk landscape.
-  Coordinate with colleagues who cover business units and infrastructure groups in discussing impact of Emerging technology risks to business and support processes.
-  Monitor industry developments in the management of Emerging technology risk.

-  Bachelor's Degree (minimum), Master's Degree preferred.
-  Significant demonstrated experience in Emerging technology risk management related work experience such as AI/ML, Cloud, Blockchain, IoT, etc.
-  Significant, demonstrated experience in technology and/or cybersecurity related work experience, preferably in or applicable to the financial services industry.
-  Strong interpersonal skills required to work in a team-oriented environment successfully.
-  Excellent communication skills, both verbal and written; ability to produce concise and effective presentations tailored to technical and non-technical audiences.
-  Proficiency in computer network defense, software programming, technology integration, computer science, or related fields.
-  Strong project management and organization skills.
-  Ability to multitask and prioritize.
-  Ability to work under pressure and to tight deadlines.
-  Flexible and self-motivator.
-  Strong analytical and problem-solving skills.
-  Proficiency in MS Office and related applications (e.g. Word, Excel, PowerPoint).

For Baltimore, expected base pay rates for the role will be between $112,000 and $177,000 per year at the commencement of employment. However, base pay if hired will be determined on an individualized basis and is only part of the total compensation package, which, depending on the position, may also include commission earnings, incentive compensation, discretionary bonuses, other short and long-term incentive packages, and other Morgan Stanley sponsored benefit programs.

Morgan Stanley's goal is to build and maintain a workforce that is diverse in experience and background but uniform in reflecting our standards of integrity and excellence. Consequently, our recruiting efforts reflect our desire to attract and retain the best and brightest from all talent pools. We want to be the first choice for prospective employees.

It is the policy of the Firm to ensure equal employment opportunity without discrimination or harassment on the basis of race, color, religion, creed, age, sex, sex stereotype, gender, gender identity or expression, transgender, sexual orientation, national origin, citizenship, disability, marital and civil partnership/union status, pregnancy, veteran or military service status, genetic information, or any other characteristic protected by law.

Morgan Stanley is an equal opportunity employer committed to diversifying its workforce (M/F/Disability/Vet).