5. Committing to Diversity and Inclusion

Morgan Stanley is committed to helping its employees build meaningful careers and we strive to be a place for people to learn, achieve and grow.

Legal and Compliance Division Profile

Legal & Compliance Division (LCD) comprises of Legal, Compliance, Global Financial Crimes, Operational Risk and Regulatory Relations. Compliance, Global Financial Crimes and Operational Risk are together referred to as Non-Financial Risks (NFR)
>The Legal Department provides guidance, requirements, and procedures for understanding and complying with the laws, regulations and Firm policies that apply to our businesses.
>The Global Compliance Department identifies applicable Compliance Obligations and maintains a Firmwide Compliance Risk management program, including Compliance Risks that transcend business lines, legal entities and jurisdictions of operation.
>Global Financial Crimes is responsible for the development and governance of the Firm's financial crime prevention efforts across all regions and business units. Global Financial Crimes is comprised of the Anti-Money Laundering (AML), Sanctions, Anti-boycott, Anti-Corruption (ACG), Government, and Political Activities Compliance (GPAC) programs.
>Operational Risk refers to the risk of financial or other loss, or potential damage to a firm's reputation, resulting from inadequate or failed internal processes, people, systems, or from external events. Operational Risk Department (ORD) defines the framework, standards and governance for Operational Risk for the Firm, and implements and monitors the company-wide operational risk program. ORD works with the business units and control groups to help ensure Morgan Stanley has a transparent, consistent, and comprehensive program for managing operational risk, both within each area and across the firm globally.
>The Global Regulatory Relations Group (GRRG) is responsible for strategic and centralized management of the supervisory activities of Morgan Stanley's regulators and related developments globally, with a focus on regulatory reviews and examinations and continuous monitoring activities. GRRG serves as the central point of contact for the regulatory staff responsible for supervisory activities at Morgan Stanley entities and for timely reporting to Firm management and other governance or management bodies, as appropriate, on those relationships and supervisory processes, including areas of significant regulatory focus or concern.

LCD Center of Excellence - Mumbai (LCDCoE) is a part of Morgan Stanley's Global In-house Center, which provides global support to LCD and is an integral part of Firm and LCD strategy.

Specialized Technical Analytics (STA) a function within Operational Risk has an opening for an Associate to support Cyber, Technology, and Information Security Risk Oversight team (CTIS) The successful candidate will be responsible for helping execute independent oversight, analysis, and monitoring of risks, controls, and key metrics.Background on the Position
This role resides within the independent, second line of defense function responsible for providing operational risk oversight for Cybersecurity, Technology, and Information Security across both Morgan Stanley Private Bank, NA (MSPBNA) and Morgan Stanley Bank, NA (MSBNA). Morgan Stanley implements the following three lines of defense model:

>1st Line: Business Units/Infrastructure Groups - Own their operational risk & are responsible for its management.
>2nd Line: Oversight by Independent Risk Management and Control Functions - Partner with Business Units and Infrastructure Groups to anticipate, mitigate and report on operational risk.
>3rd Line: Independent Assessment by Internal Audit - Provides independent, assessment, validation and evaluation.

Primary Responsibilities
>Support the US Banks operational risk department in all relevant governance, steering, and working group committees and ensure that governance-related activities are in compliance with the US Banks Risk Governance Framework policies and procedures.
>Provide monthly and quarterly cyber incident and issue reporting.
>Maintain and opine on relevant policies and procedures.
>Build and maintain strong positive relationships with the broader risk community and the technology and security operational risk management teams.
>Monitor Risk Acceptances and Long Dated Issues on a regular basis to ensure proper reporting and governance.

Experience Required
>Bachelor's degree in information technology, computer science, cybersecurity, data science, finance, economics, business, or related fields. Advanced degree holders are also encouraged to apply.
>3 -7 years of cybersecurity, technology, information security, risk management, or related work experience.
>Strong project management and organization skills; ability to multitask and prioritize.
>Demonstrated critical thinking and problem-solving skills.
>Strong interpersonal skills to engage with multiple stakeholders.
>Ability to work under pressure and meet tight deadlines.
>Flexible and self-motivator
>Highly proficient in MS Office Suite (e.g., Word, Excel, PowerPoint). Additional expertise in tools such as PowerBI, Tableau, and other data aggregation and reporting tools a plus.

Experience Preferred
>Proficient in computer network defense, software programming, technology integration, or related disciplines.
Morgan Stanley is an equal opportunities employer. We work to provide a supportive and inclusive environment where all individuals can maximise their full potential. Our skilled and creative workforce is comprised of individuals drawn from a broad cross section of the global communities in which we operate and who reflect a variety of backgrounds, talents, perspectives and experiences. Our strong commitment to a culture of inclusion is evident through our constant focus on recruiting, developing and advancing individuals based on their skills and talents.