Cybersecurity Audit Associate

We're seeking someone to join as an Associate to work in the Cybersecurity audit team, within Internal Audit, to manage and execute risk-based assurance activities.

In the Audit division, we provide senior management an objective and independent assessment of the Firm's internal control environment for risk management and governance. This is an Associate level position within our Technical Specialist function, which is responsible for providing subject matter expertise, controls testing and reinforcing the ability of business and technology audit teams to appropriately assess risk.

Since 1935, Morgan Stanley is known as a global leader in financial services, always evolving and innovating to better serve our clients and our communities in more than 40 countries around the world.

What you'll do in the role:

• Formulate and execute a wide range of assurance activities to assess risks within Cybersecurity and the state of controls in place to mitigate them
• Proactively identify Cybersecurity risk, assess criticality/impact to the business and communicate actionable insights to management
• Effectively partner with colleagues and stakeholders globally to drive effective working relationships
• Align projects and initiatives with department and coverage area priorities, and execution of deliverables in accordance with audit methodology and quality standards

• At least 2 years' relevant experience would generally be expected to find the skills required for this role
• Ability to articulate risk and impact clearly and succinctly to different audiences
• Effective change and project management techniques and ability to support teams in adapting new ways of working
• Ability to leverage and analyze data to inform focus and views on risk
• Knowledge of industry practices and regulations impacting Cybersecurity domain

• Understanding of audit principles, methodology, tools, and processes (e.g., risk assessments, planning, testing, reporting and continuous monitoring)
• Industry relevant certifications like CISA, CISSP, CEH, OSCP etc. will be an added advantage
• Relevant degree in sciences, technology, Cyber or Information Security
• Coverage
• Hybrid working (4 days in office) Monday to Friday from 09:00 AM to 06.00 PM with flexibility on standard working hours for time sensitive matters
• Periodic evening calls with US and EMEA internal clients and vendors.

• Hybrid working (4 days in office) Monday to Friday from 09:00 AM to 06.00 PM with flexibility on standard working hours for time sensitive matters
• Periodic evening calls with US and EMEA internal clients and vendors.