Cloud Security Architecture Specialist (Hybrid)

We're seeking someone to join our Cloud Security Architecture team as a Cloud Security Architecture Specialist in Cyber to conduct comprehensive security evaluations and provide architectural/design guidance for current and emerging cloud technologies to be used in the Firm.

In the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities. This is a Cyber Security Engineering position at Director level, which is part of the job family responsible for providing specialist cyber expertise and creating solutions that protect the organization's systems and networks against actual and potential security threats and vulnerabilities.

Since 1935, Morgan Stanley is known as a global leader in financial services, always evolving and innovating to better serve our clients and our communities in more than 40 countries around the world.

Interested in joining a team that's eager to create, innovate and make an impact on the world? Read on...

What you'll do in the role:

• Provide security expertise to engineering and development teams, acting as a project team member providing consulting advise ensuring security requirements are integrated in the project.
• Provide specific security expertise to engineering teams by identifying and creating patterns and blueprints for repeatable security, infrastructure and application instantiations. Blueprints and patterns may address such areas as network design, database access, authentication methods, encryption requirements, key management, entitlement design, identity management, logging, input validation, secure data transfer among others. This involves liaising with other technology subject matter experts to build consensus, outlining areas of improvement in written form and explaining concerns early on.
• Identify areas of risk on projects where security requirements cannot be fully addressed in the required time frame of the project.
• Document and present those risks to senior business, IT and Security team members.
• Help identify areas of security the firm might want to invest in improve IT security.
• Product security case reports to document and highlight specific risks along with potential mitigations.

• 4+ years of hands-on experience in cloud, application and/or infrastructure security
• Strong Information Security Background with strong experience in risk assessments and security architecture design and reviews
• Ability to influence and engage with senior management
• Ability to write documentation for all types of audiences, from very specific technical guides to higher level research on technologies and vendors.
• Familiarity with Cloud platforms such as GCP, AWS or Azure.
• Excellent communication / interpersonal skills to be able to interact at all levels & be effective as part of a broader team, capable of taking broad objectives and create and execute a concrete plan.
• Ability to manage expectations and handle high-pressure situations with tight deadlines while working independently.