Senior Security Architect Specialist (Hybrid)

We're seeking someone to join our team as a Senior Security Architect Specialist to lead security assessments and threat modeling activities across a diverse technology environment, helping strengthen the firm's security posture by identifying risks and driving effective remediation strategies.

In the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities. This is a Lead Risk & Resiliency Management position at Vice President level, which is part of the job family responsible for identifying, assessing, and mitigating risks to ensure operational continuity and resilience in the face of potential threats or disruptions that could impact the organization, plus management of ongoing incidents.

Since 1935, Morgan Stanley is known as a global leader in financial services, always evolving and innovating to better serve our clients and our communities in more than 40 countries around the world.

What you'll do in the role:

• Undertake security design reviews and support the ongoing design of new infrastructure and endpoint security controls.
• Identify technical control gaps and assess security requirements needed to remediate identified risks.
• Ensure the ongoing quality and consistency of security assessments across technology initiatives.
• Provide architectural and implementation guidance to help technology teams follow security best practices.
• Communicate technical control gaps, attack scenarios, and associated risks to IT System Owners and technology stakeholders.
• Deliver detailed remediation guidance and partner with technology owners to address identified vulnerabilities.
• Articulate technology and security risks to Business Owners and support risk-based decision making.
• Identify and define new technical control requirements as emerging technologies are introduced.
• Provide subject matter expertise, coaching, and support on infrastructure and application security topics across the technology organization.

• At least 6 years' relevant experience in infrastructure security, application security, or secure risk assessment within large enterprise environments.
• Bachelor's degree in Computer Science, Software Engineering, or equivalent.
• Ability to explain common application vulnerabilities and detailed remediation strategies to developers.
• Ability to communicate technology risks introduced by application and infrastructure vulnerabilities to Business Owners and senior stakeholders.
• Experience in security architecture reviews, threat modeling, and technical risk identification.
• Understanding of enterprise security controls, including endpoint, network, operating system, and cloud-based technologies.
• Experience with Microsoft technologies, including Active Directory, Intune, Endpoint Manager/SCCM, Defender, Office 365, or Power Platform.
• Experience with secure network architecture, DevOps environments, or SaaS technology platforms.
• CISSP certification or comparable industry-recognized security certification preferred.