Technology Risk and Control Associate

Technology Risk and Control Associate

Job Number:

3230457

POSTING DATE: Feb 10, 2023 PRIMARY LOCATION: Europe, Middle East, Africa-United Kingdom-United Kingdom-Glasgow EDUCATION LEVEL: Bachelor's Degree JOB: Risk Management EMPLOYMENT TYPE: Full Time JOB LEVEL: Associate

DESCRIPTION

Risk / Policy Mgmt (Technology Management)
Glasgow

3230457
The Technology Controls Group (TCG) is seeking a Technology Risk professional to join a global team that is responsible for the Technology Risk and Control Self-Assessment (RCSA) and IT SOx Assessment/Certification program. This is a full-time position that will require the ability to work collaboratively, and interact regularly with senior management, global stakeholders, and technology system owners. As such, the role will offer opportunities in a wide range of responsibilities and will provide visibility across the organization. The role will involve assessing impact to the technology global controls and risks, communicating, and explaining these decisions to interested parties, and continually looking for opportunities to streamline the current processes.
About Morgan Stanley Morgan Stanley is a leading global financial services firm providing a wide range of investment banking, securities, investment management and wealth management services.
As a market leader, the talent and passion of our people is critical to our success. Together, we share a common set of values rooted in integrity, excellence, and strong team ethic. We can provide a superior foundation for building a professional career – a place for people to learn, to achieve and grow. A philosophy that balances personal lifestyles, perspectives and needs is an important part of our culture.

QUALIFICATIONS

What will you be doing? Responsibilities

• Execute, maintain and support all aspects of the RCSA process for the Technology division
• Review and manage triggers (e.g. Controls, Processes, etc.) to determine whether they have a material impact on existing risk and control profiles
• Map newly identified issues and incident to firm and Technology risk and control taxonomies
• Assess control environment based on various inputs (e.g. assessment programs, testing and metrics, issues, etc.)
• Prepare and present results to primary control owners, Technology Senior Management, Business Units, and other stakeholders
• Support the identification, assessment and management of agreed responses to risks and controls
• Manage the semi-annual Technology Sarbanes-Oxley (SOx) self-assessment and certification with system owners and their managers
• Facilitate senior management sign off on Technology SOx compliance each quarter
• Work with Finance to understand the outcomes of the annual SOx testing program and to drive improvements to the assessment process
• Support process enhancement initiatives

Skills that will help you in the role:

Strong verbal, written and interpersonal communication skills. Ability to work effectively with all levels of Technology organization and business units. Experience and understanding of technology controls, and information security and Business risks. Aptitude for IT and strong understanding of technology concepts and terminology Diligence and attention to details Strong analytical and problem-solving skills Strong organizational skills and an ability to manage multiple demands and changing priorities

Certified Persons Regulatory Requirements: Skills Desired (One or more of the following Industry Certifications)

Certified Internal Auditor (CIA) Certified Information Systems Auditor (CISA) Certified in Risk and Information Systems Control (CRISC) Certified in the Governance of Enterprise IT (CGEIT) Certified Information Systems Security Professional (CISSP)

Where will you be working?

This role is based at our Glasgow office on Waterloo Street in the city center. This location has a wellness center, including gym and shower/changing facilities, GP, Prayer room, canteen, and onsite Starbucks.

Flexible work statement: Interested in flexible working opportunities? Morgan Stanley empowers employees to have greater freedom of choice through flexible working arrangements. Speak to our recruitment team to find out more.
Internal Applicants: Internal mobility can be a way to grow your career and realize your professional potential. Typically, you must be in your position for at least 18 months and performing satisfactorily before applying for another job at the Firm. Internal applicants can find out more regarding career navigation, mobility guidelines and policy on our employee portal by clicking here.
Equal opportunities statement: Morgan Stanley is an equal opportunities employer. We work to provide a supportive and inclusive environment where all individuals can maximize their full potential. Our skilled and creative workforce is comprised of individuals drawn from a broad cross section of the global communities in which we operate and who reflect a variety of backgrounds, talents, perspectives, and experiences. Our strong commitment to a culture of inclusion is evident through our constant focus on recruiting, developing, and advancing individuals based on their skills and talents.