Domain Aligned Risk Officer

We’re seeking someone to join our team as a Domain Aligned Risk Officer in Tech. The role ensures that material risks are identified, assessed, governed and remediated in line with firm risk appetite, regulatory expectations and Enterprise Technology & Services (ETS) Risk strategy. The role owns domain outcomes, not just execution, and acts as the primary senior risk interface to technology stakeholders and governance forums for their domain. Domain Aligned Risk Officer sits within ETS Risk Management, whose mandate is to provide clear visibility of technology risk, strengthen the ETS control environment, support regulatory and audit engagement, and ensure effective remediation of material risks across Enterprise Technology & Services.  ETS is the Firm’s enterprise infrastructure organisation and is responsible for the delivery of resilient core infrastructure, application services end user and collaboration tools and strategic cross-firm programs include the modernisation and cloud agenda. Within ETS Risk Management, the Domain Aligned Risk Management (DARM) team delivers horizontal risk oversight across ETS by managing risk at the level of firm Technology Standards (domains). DARM complements super department risk officers by driving consistency in risk identification, control implementation, measurement and remediation, and by providing senior management with a clear, domain level view of risk posture. This is a Lead Risk & Resiliency Management position at Vice President level, which is part of the job family responsible for identifying, assessing, and mitigating risks to ensure operational continuity and resilience in the face of potential threats or disruptions that could impact the organization, plus management of ongoing incidents. Since 1935, Morgan Stanley is known as a global leader in financial services, always evolving and innovating to better serve our clients and our communities in more than 40 countries around the world. What you’ll do in the role: End to end ownership of a number of risk domains including Data Security. Accountability for all Domain Aligned Risk Management services within scope: Domain Risk Ownership Participate and represent ETS Risk Management on key Data Security Programs Control Coverage & Remediation Stakeholder Engagement & Governance Judgement & Escalation Decision Making Authority Experience & Capabilities Strong background in technology risk and control frameworks, or regulatory risk management Demonstrated ability to own domain level outcomes, not just activities Comfortable operating with senior stakeholders and governance forums Able to translate complex regulatory or technical risk into clear, actionable decisions What you’ll bring to the role: Experience in cyber risk and controls within a technology environment. Experience and/or awareness in cyber risk and controls supporting data security (encryption, key management, certificate management etc). Experience in regulatory risk management (e.g. responding to regulatory requests for information) Have industry certification (e.g. CRISC, CISSP) Bachelor’s degree in Information Technology, Risk Management, Business Continuity, or a related field, or equivalent experience. Ability to develop and execute strategic risk and resiliency initiatives aligned with business objectives. Excellent communication and interpersonal skills, with experience in engaging senior stakeholders. Experience in aligning risk and resiliency practices with regulatory requirements and industry standards. #GLTECH WHAT YOU CAN EXPECT FROM MORGAN STANLEY: At Morgan Stanley, we raise, manage and allocate capital for our clients – helping them reach their goals. We do it in a way that’s differentiated – and we’ve done that for 90 years.  Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren’t just beliefs, they guide the decisions we make every