Morgan Stanley is a leading global financial services firm providing a wide range of investment banking, securities, wealth management and investment management services. Since 1935, Morgan Stanley is known as a global leader in financial services, always evolving and innovating to better serve our clients and our communities in more than 40 countries around the world.

In Morgan Stanley, Technology works as a strategic partner with Morgan Stanley business units and the world's leading technology companies to redefine how we do business in ever more global, complex, and dynamic financial markets. Morgan Stanley's sizeable investment in technology results in quantitative trading systems, cutting-edge modelling and simulation software, comprehensive risk and security systems, and robust client-relationship capabilities, plus the worldwide infrastructure that forms the backbone of these systems and tools. Our insights, our applications and infrastructure give a competitive edge to clients' businesses and to our own.

Morgan Stanley is aggressively building its China platform to support local business expansion and help offshore business to access China market. The business covers various asset class, including cash securities, futures, derivatives as well as fund. We are looking for strong and highly motivated candidates to be part of this journey. The candidate will drive the platform setup front to back, working with 3rd party vendors to evaluate their solutions, collaborating with various organizations inside Morgan Stanley to integrate and further customize the solution.

Job Responsibilities

• Oversees key aspects of these technology risk management activities as an independent risk advisor.
• Monitor and act as the second line of defense on the responses to regulatory inquiries/inspections/audits.
• Work on supporting global technology risk assessment programs and help define local requirements.
• Assessment of IT risk exposures. Conduct self-assessment to help identify technology related risks and exceptions, and subsequently monitor, track and manage them. Areas and examples for these analyses include vendor and supplier related risks, stability, and incidents etc.
• Supporting the implementation and maintenance of Technology policies, standards and regulatory requirements. Enforcing compliance with Firm-standard technology risk posture.
• Represent technology risk at the local industry wide technology risk forums.
• Provide technology risk update to the governance committees of MS regulatory entity.

Job Requirements

• Strong understanding of financial industry businesses and technology risk concept and China regulatory environment and/or experience as technology auditor.
• Working experience of risk assessment methodologies, internal controls and industry technology risk management frameworks such as ITIL, CobiT, and ISO 27001.Outstanding communication and interpersonal skills.
• Ability to work effectively with all levels of the organization. Excellent influencing and negotiation skills.
• Ability to draft high quality written products that are comprehensive, accurate, and tailored to the audience.
• Strong organizational skills and an ability to manage multiple demands and changing priorities. Detail oriented.
• Strong analytical skills required to enable independent research and accurate assessments of risk management process effectiveness and adherence to regulatory requirements.
• Willingness to travel domestically and occasionally internationally.
• 10 -12 years of relevant Technology Risk, IT Security and Information Security experience.
• Industry certifications such as CISA, CISSP, CISM, CRISC is a plus.