Incident Management Insider Threat - Associate - Cybersecurity Operations

Profile Description

We're seeking someone to join our team of information security experts as Associate Incident Management -Insider Threat who will be responsible for protecting Firm, client, and employee sensitive/confidential data. The Incident Response team is responsible for managing the detection and reporting of information security and insider threat incidents, supporting all Firm Business Units. The team coordinates with the Business Units, Legal, Corporate Security and other stakeholders to gather incident details, assess risk and assist with remediation, ensuring compliance to regulatory and Firm standards. The selected candidate will be located in Bangalore, working with a global team of Information Security professionals. This is a semi-technical role, involving insider threat incident handling only. It is unrelated to the CIRT/CERT or Security Operation Center (SOC) function, as to what is generally referred to in the market.

In the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities. This is a Incident Management position at Associate level, which is part of the Cyber Security Operations job family that monitors, detects, and responds to security incidents to ensure the organization's systems and data are protected from actual and potential threats or breaches.

Since 1935, Morgan Stanley is known as a global leader in financial services, always evolving and innovating to better serve our clients and our communities in more than 40 countries around the world.

• Conduct daily review, triage, and escalation of detected, and user reported Insider Threat events
• Collect supporting information and relevant artifacts in support of Incident Response activities
• Coordinate the response to iRespond incidents from start to finish, including but not limited to utilizing defined workflows to assess the severity of an incident, appropriate mitigation activities, communication across the organization, and ensuring proper documentation is produced outlining the details of the incident.
• Host calls with senior members of the Firm to develop quick response plans to information security incidents
• Participate in the review of information security incident handling and post-mortem analysis, in order to highlight control gaps across the organization or process gaps within the team
• Provide general Information Security advisory services to key stakeholders across the Firm as required
  Participate in projects related to operational improvements and tooling
• Provide on call and out of hours support Qualifications

• At least 2 years' relevant experience would generally be expected to find the skills required for this role.
• Experience in a similar role or working knowledge of Incident Management, Information Security, or Data Privacy
• Ability to analyze data to look for anomalies or appropriately identify potential risk issues requiring further escalation
• Very strong verbal and written English communications skills
• Ability to handle sensitive situations with discretion and maintain confidentiality
• Ability to handle multiple competing priorities, while maintaining attention to detail
• Working knowledge of Excel, PowerPoint, Visio, Power BI etc
• Excellent interpersonal skills
• Flexible and self-motivator

• Information Security-related Certifications (e.g., CISM, CRISC, CISSP, Security+)
• Knowledge or experience in supporting Insider Threat mitigation strategies
• Knowledge in personal data protection or privacy regulations
• Knowledge of Splunk, incident management tools like Microsoft Dynamics and DLP detection products
• Familiarity with artificial intelligence concepts and AI-powered productivity tools.