 |
|
|
|
|
|
|
 |
 |
|
 |
|
Careers at
Morgan Stanley
Morgan Stanley is a global
financial services firm offering a complete range of financial services
to a large and diversified group of clients and customers, including
governments, corporations, institutions and individuals throughout
the world. The talent and passion of our people is critical to our
success. Together, we share a common set of values rooted in integrity
and excellence. Morgan Stanley can provide a superior foundation
for building a professional career - a place for people to learn,
to achieve and to grow.
|
 |
 |
|
 |
 |
|
Status
Full-Time
Location
US-NY-New York
Loading Map...
City Position is Located
US-NY-New York
Loading Map...
Contact:
Not Available
|
Job Category
Management
Education:
4 Year Degree
Reference Code
PCK505-230059
|
Job Description
Position Category: Risk Management
Position Title: Information Security Manager-Vendor Security
Job Level: Vice President
Location: USA - NY - New York
Education Required: Bachelors Degree
Position Description:
The candidate will manage the vendor/supplier security team within the Information Security Office and interface with members IT Security, Legal, Operations, Firm wide Sourcing, etc.
Duties and responsibilities will include but are not limited to the following:
Oversight of the Information Security Vendor/Supplier Security team and all of its related responsibilities
Represent Information Security in the Security Architecture (SECARCH) review process
Ensure vendor/supplier inventory is a current reflection of risk rating, schedule, contacts, etc.
Streamline vendor/supplier related processes such as tracking of open issues/control gaps, keeping vendor/supplier inventory current, scheduling and performing assessments, etc.
Perform vendor/supplier security assessments
Provide status updates, metrics, etc. on Vendor/Supplier Security
Presentations to Management on Vendor/Supplier Security topics
Global coordination of Vendor/Supplier Security initiatives within Information Security
Oversight of E&Y Consortium performing onsite and offsite vendor/supplier assessments
Represent Information Security in Vendor/Supplier security related discussions with BCP, Firmwide Sourcing, Legal, etc.
Determine how to best leverage Firm systems containing vendor/supplier related data such as Contract Management System (CMS), RADAR/SONAR, TAI, etc.
Monitor completion of assessments against annual plan
Monitor control gap remediation
Provide training on the following types of topics: oversight of vendors/suppliers, responsibilities when interacting with vendors/suppliers, etc.
Skills Required:
College graduate with at least 10 years related (Information Security, Technology or Security Audit, and or Vendor Management) work experience
Strong Security background; Financial Services industry experience preferred
MS Office business application experience (Excel, Word, Powerpoint, Access, Project)
Self motivated individual with the ability to manage projects receiving minimal supervision
Effective verbal and written communication skills and strong interpersonal skills
Demonstrated understanding of risks and controls
Analytical mindset with attention to detail and accuracy
Good planning and time management skills
Strong Project/Program and People management skills
Ability to become quickly proficient in new technologies
Ability to multi-task
Extensive problem solving skills
Goal Oriented
Job Requirement
.
Click here to apply:
It is the policy of Morgan Stanley to ensure equal employment opportunity without discrimination or harassment on the basis of race, color, religion, age, gender, gender identity, sexual orientation, national origin, citizenship, disability, marital and civil partnership/union status, pregnancy (including unlawful discrimination on the basis of a legally protected pregnancy/maternity leave), veteran status, or any other characteristic protected by law.
|
|
|
|
|
|
|
|
For your privacy and protection, when applying
to a job online:
Never give your social security number to a prospective employer, provide
credit card or bank account information, or perform any sort of monetary
transaction. Learn More >> |
|