Risk / Policy Mgmt (Technology Management)

Job Description

*Overview With offices across the globe, including NY, London, Hong Kong and Glasgow, the Risk Oversight, Governance and Engagement (ROGE) Function is responsible for risk coverage across the technology organisation. This Mumbai based full time employee role sits within the Technology and Operations Risk team which is accountable for the identification, assessment, mitigation and/or acceptance of risks and policy compliance, as well as governance of the Firm s risk programmes. This is a dynamic role giving the opportunity to work across the whole landscape of technology risk management. The successful candidate will be accountable to the senior Risk Transformation Officer (RTO) and will work closely with all the firm s technology divisions, management and risk team s leads. Team Profile The Technology Risk Transformation team looks to strike the right balance between short-term improvements and long-term value, with risk efficiency and effectiveness, by making sure management themselves take responsibility for change and personally ensuring they deliver results quickly and with suitably high ambition. With many high-level, complex processes that involve large numbers of discrete initiatives the team s mandate is to ensure the full bottom-line targets are delivered for the Firm and that the top managers are held accountable for their deliverables. The team provide a holistic view of the risk transformation portfolio enabling the Technology and Operations Risk division s senior management to make the appropriate risk-based decisions. The team act as the face of the transformation, sets the tone, encourage, and challenges current risk decisions and understanding. Its objective is to make the organisation fitter and to sustain the effort over the longer term. Role Profile Morgan Stanley s is looking for Risk Transformation Officer (RTO) candidates to help drive risk transformation practices associated with technology operational risk awareness, identification, assessments, reporting, governance, management, mitigation and/or acceptance, and policy compliance. As regulatory demands continue to expand in complexity and detail, candidates will contribute to the delivery of the risk transformation programs by helping clients manage change, harness innovation, and transform processes. The candidates, using their unique skills and experience will drive transformational change. Candidates would be expected to work on multiple transformation programs across a wide variety of clients, be an experienced and highly capable leader, accept nothing without facts and independent analysis, and be good problem solvers with strong interpersonal skills which are needed to encourage and embed change. The candidates would hold responsibility for all aspects of their programs, management including planning, managing mobilization, driving execution, and supporting change implementation. The candidates would work closely with senior management to ensure alignment of the programs with the wider Risk Transformation portfolio., *Candidates for Risk Transformation Officer (RTO) should have experience in several of the skills below: Bachelor Degree in a field related to Information Technology, Business or Risk Management Aptitude for technology and strong understanding of technology concepts and terminology; experience in software development, technology infrastructure, risk analysis or audit reporting, a plus Familiar with industry standards, best practices and regulatory expectations in respect to technology and IT risk management A strong cross-functional background and have seen a variety of different business situations and challenges during their career. Knowledge of Technology and/or Information Security policies and procedures Understanding of risk assessment methodologies, internal controls and controls testing, and industry technology risk management frameworks, as well as familiarity with SDLC and Project Management methodologies Exposure to analytical and data analysis skills Ability to work in a team environment A course of study that included risk management frameworks and methodologies, identifying and modeling information security risks, qualitative and quantitative risk assessment methods, risk controls and mitigation, and/or business impact analysis Critical thinker with strong problem-solving skills and organizational skills, with the ability to multi-task Strong written and verbal communication skills, interpersonal and collaborative skills Preferred Certifications in one or more of the following: ISACA Certification (CISA, CRISC, CISM, CGEIT); PMI Certification (CAPM, PMP, etc.); ISC2 Certification (CISSP, SSCP, etc.); ITIL Certification (Foundation, Practitioner (General), Service Manager, Practitioner (Specialist)

Keyskills :
quantitative riskinternal controlscommercial modelstechnology riskrisk analysissoftware developmentrisk managementoperational riskit riskdata analysisinformation security