Executive Director - Application & Cyber Security Engineer

About Us

Morgan Stanley is a leading global financial services firm providing a wide range of investment banking, securities, investment management and wealth management services. The Firm's employees serve clients worldwide including corporations, governments and individuals from more than 1,200 offices in 43 countries. As a market leader, the talent and passion of our people is critical to our success. Together, we share a common set of values rooted in integrity, excellence and strong team ethic. Morgan Stanley can provide a superior foundation for building a professional career - a place for people to learn, to achieve and grow. A philosophy that balances personal lifestyles, perspectives and needs is an important part of our culture.

Technology

Technology works as a strategic partner with Morgan Stanley business units and the world's leading technology companies to redefine how we do business in ever more global, complex, and dynamic financial markets. Morgan Stanley's sizeable investment in technology results in quantitative trading systems, cutting-edge modelling and simulation software, comprehensive risk and security systems, and robust client-relationship capabilities, plus the worldwide infrastructure that forms the backbone of these systems and tools. Our insights, our applications and infrastructure give a competitive edge to clients' businesses-and to our own.

Role Description

We are seeking a senior executive to lead our Application Security and Cybersecurity efforts. The ideal candidate will have a strong background in Application Security part of Enterprise Security Platforms. The Executive Director will be responsible for building and maintaining a robust security posture, partnering with cross-functional teams, and driving security excellence across the firm.

The role requires technical leadership and guidance to application security team. As technical expert hands on experience to design application security systems, perform technical analysis and offer solutions keeping developer engagement as key partners for success. Contributing to improvising standards and procedures and coordinating with stakeholders for implementing and maintaining integrated secure applications across the firm. We are looking for experienced application security leader who played role as an engineer in the past so that application is protected from various application security risks.

The person should have experience working in large organizations where cross-department and cross-divisional collaborations with other executives on strategies and partnerships is key to success. The person must be able to document Architecture Engineering decisions and offer oversight for all functions in Application Security space.

Required Skills

• 5+ years of IT experience, with 10+ years in the security domain, specifically in Application Security.
• Strong understanding of SDLC standards, Vulnerabilities, cyber incidents, Penetration testing tools, security frameworks and compliance regulations
• Prior experience front to back on application security key areas from design, integration of SCA, SAST, DAST, Container scanning tools with CI/CD to reporting key metrics to stakeholders.
• Strong understanding of security industry standards and regulatory requirements.
• Experience with design thinking, security reviews, and validating designs for security.
• Proven leadership and stakeholder management skills.
• Ability to build and track key metrics to measure security posture.
• Strong communication and partnership skills, with ability to work with cross-functional teams.
• Experience in building and leading a security champions program, with a track record of Identifying, training, and empowering security champions across the organization.
• Developing and implementing a security champions framework.
• Measuring and evaluating the effectiveness of the Security Champions program
• Good understanding of Cyber technologies and their integrations in large environments.
• Interpersonal Skills - Communication, flexibility, self-driven, team player
• Ability to communicate well with other senior executives on risks, strategy, and solutions
• Strong analytical and problem-solving skills.
• Confidence is presenting and critiquing design and architecture across.
  

Skills Desired

• Knowledge on cyber domains: Data Protection, Cryptography, Network Security, Web application firewalls, Identity and access management.
• Good understanding of the protocols underpinning the web - TCP/IP, HTTP, SSL/TLS etc.

Morgan Stanley is an equal opportunities employer. We work to provide a supportive and inclusive environment where all individuals can maximize their full potential. Our skilled and creative workforce is comprised of individuals drawn from a broad cross section of the global communities in which we operate and who reflect a variety of backgrounds, talents, perspectives, and experiences. Our strong commitment to a culture of inclusion is evident through our constant focus on recruiting, developing, and advancing individuals based on their skills and talents.