Job Description

We offer:

• To work with some of the best professionals in the business - for a firm that values individual intellect as much as teamwork
• State-of-the-art offices that are designed to maximize collaboration
• Flexible working arrangements
• Enriching challenges that provide opportunity for constant learning and advancement
• An environment which is leveraging technology to its highest potential

Team Profile:

Technology Risk's (Tech Risk) mandate is to enable the Firm to manage its technology related risks. The department executes the first line of defense technology risk management capabilities and implements proactive, comprehensive, and consistent risk management practices across the Firm.

Tech Risk protects the Firm's information, systems, and infrastructure from cyber and insider threats; ensures the secure and stable delivery of services to our clients; and adjusts to risks presented by an evolving threat landscape. The department delivers a range of operational capabilities, as well as suite of advanced detection, monitoring and analytics, and also provides expert advice on secure design and development and control effectiveness. Tech Risk manages responses to regulatory and client inquiries about the Firm's technology environment and ensures Technology divisions meet governance and oversight obligations along all lines of defense, driving material and measurable risk reduction. Tech Risk maintains strategic relationships with external entities, both public and private, to facilitate information sharing and innovation in financial services, technology, and government, and is also responsible for building risk education and security awareness programs to increase vigilance across the Firm.

Position Description:

The Enterprise Security Architecture team is a center of excellence covering the technical architecture and strategy for security services to be operated or consumed by Morgan Stanley. Supporting and facilitating strategic planning, investment prioritization and portfolio management, it sets technology standards for the purpose of consistency and efficiency and provides oversight of adherence to policy, architecture and SDLC standards.

Responsibilities:

The successful candidate will have responsibility for:

• Investigating and documenting strategic cross-discipline security solutions for an array of business problems.
• Assist in the evaluation and assessment of strategic security architectures and designs.
• Collaborate with the SMEs in engineering and architecture as well as other partners across the firm to deliver core security capabilities and their application across major infrastructure and application environments both on premises and in the cloud.
• Develop frameworks and applications to support the security technology domains derived from the architectures and designs.
• The successful candidate will help shape the future security landscape with a strategic outlook coupled to a disciplined design approach. This is an ideal role for someone looking to develop security and technical knowledge in an architecture role that will help to innovate at scale in an enterprise environment.

Qualifications

Required skills:

• 5-10 years of exp
• Bachelor's degree
• Technology development or Architectural design background
• Understanding of Security and/or Security solutions
• Excellent communication skills coupled with a collaborative approach
• Understanding of Enterprise Architecture at scale
• Experience delivering and/or running environments, networks, applications, or infrastructure

Desired skills:

• Experience of researching/using/applying standard security frameworks such as NIST, MITRE
• Experience working in a large, regulated, corporate entity
• Broad experience across one or more of: API management, Power Platform, web, and cloud hosted applications, M365 implementation, zero trust requirements, Azure AD, remote access services, end point, virtual machine, and mobile infrastructure deployments
• Experience of relevant security controls such as data protection, data loss prevention (DLP), business information barriers (BIB), business to business (B2B) collaboration, web applications security (e.g., Proxy, SASE), end user controls, end point controls (e, g. vulnerability management, EDR) and network security.
• Experience of consultation/collaboration with engineering and business stakeholders as part of project deployment(s)

About us:

Morgan Stanley is a global financial services firm and a market leader in investment banking, securities, investment management and wealth management services. At Morgan Stanley Montreal, we are shaping the future of our global business and contributing to our local community. Our team works across numerous areas.

Morgan Stanley is an equal opportunities employer. We work to provide a supportive and inclusive environment where all individuals can maximize their full potential. Our skilled and creative workforce is comprised of individuals drawn from a broad cross section of the global communities in which we operate and who reflect a variety of backgrounds, talents, perspectives, and experiences. Our strong commitment to a culture of inclusion is evident through our constant focus on recruiting, developing, and advancing individuals based on their skills and talents.

All our positions are located in Montreal, Quebec. We offer a hybrid work environment, combining remote work and attendance in the office.

Knowledge of French and English is required.

Spotlight on our Montreal Technology Centre: https://www.youtube.com/watch?v=oo5GaXpCwKs

*Video dated October 2019.

Build a career with impact. Visit morganstanley.com for more information.