Cyber Incident Manager

We’re seeking someone to join our team as a Cyber Incident Manager to support and lead the management of global cyber events and incidents. To succeed in this role, you will need a mix of cybersecurity knowledge, communication skills, people skills, operational experience, and the ability to solve complex problems. As a member of our pro-active, pragmatic, and energetic team, you are in the unique position to interact with people and teams globally, across all levels of the Firm, and drive the decisions required to protect the Firm.

In the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities.

This is a Risk & Resiliency Management Manager position at Director level, which is part of the job family responsible for identifying, assessing, and mitigating risks to ensure operational continuity and resilience in the face of potential threats or disruptions that could impact the organization, plus management of ongoing incidents.

Since 1935, Morgan Stanley is known as a global leader in financial services, continuously evolving and innovating to better serve our clients and our communities in more than 40 countries around the world.

About the Division:

Fusion Response and Recovery leads rapid and comprehensive Response and Recovery operations to minimize impact from a broad range of potentially business disrupting, to significantly impacting, threats and incidents, from cyber and fraud to technology incidents, weather events, terror attacks, geopolitical unrest & pandemics, collaborating with partner organizations to Understand, Prepare, and Learn from these events.

Fusion's 24/7 proactive follow-the-sun model is the cornerstone of the Firm's operational response and resilience capability with locations in New York, Alpharetta, London, Glasgow, Hong Kong, Tokyo, and Singapore.

About the Team:

The Fusion Cyber Enterprise Management (CEM) team is responsible for orchestrating the Firm-wide response to consequential fraud, information security or business disrupting events and incidents introduced because of the malicious use of technology and/or a third-party incident. In partnership with cyber, technology and business stakeholders, CEM develop a plan to rapidly mitigate business, regulatory or reputational impact through calculated severity scoring, stakeholder engagement and tiered communications.

About the Role:

A typical day involves providing coverage for the EMEA CEM Team. You will take ownership of assigned incidents and preparedness activities, exercising independent judgement within established frameworks and escalating complex or material decisions appropriately. You will collaborate across the CEM team to manage escalations by assessing the risk/incident severity and engaging the key stakeholders to facilitate the required remediation, while ensuring the coordination of teams involved and providing timely incident communications. The position requires dynamic thinking during high pressure situations, organizational and situational awareness, sound judgement and a strong analytical ability.

You will also strengthen incident preparedness and continuous improvement by leading constructive post-incident reviews to document lessons learned and identify risk owners. Additionally, you will partner with key stakeholder teams to develop incident scenarios, playbooks and response drills.

What you’ll do in the role:

• Ability to communicate clearly and effectively in complex situations, both verbally and in writing, with all levels of the organization.
• Practical experience in cybersecurity (or associated field), with the ability to interpret technical findings and understand their implications for incident response and business risk.
• Crisis management skills:
• Ability to lead conference calls with large groups of geographically dispersed stakeholders.
• Ability to prioritise effectively and exercise sound judgement.
• Ability to distil technical and complex information into easily understood business terms.
• Ability to coordinate technical workstreams (e.g. forensic investigations) alongside non-technical workstreams (e.g. data impact reviews and external communications) to mitigate risk and impact.
• Ability to drive your own learning, proactively identify gaps in understanding, and be receptive to constructive feedback.

What you’ll bring in the role:

• Experience working for a global distributed organization conducting 24/7 operations.
• Experience applying AI to improve operational processes, ideally within cybersecurity or incident response.
• Experience translating operational needs into clear tooling requirements and contributing to solution design with technology teams.
• Proven troubleshooting skills including a strong sense of commitment and drive towards incident resolution.
• Experience working in complex or regulated environments.
• Certifications such as: Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM) or SANS Certifications (GCIH, GSEC, etc.), or equivalent practical experience.

WHAT YOU CAN EXPECT FROM MORGAN STANLEY:

At Morgan Stanley, we raise, manage and allocate capital for our clients - helping them reach their goals. We do it in a way that’s differentiated - and we’ve done that for 90 years. Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren’t just beliefs, they guide the decisions we make every day to do what's best for our clients, communities and more than 80,000 employees in 1,200 offices across 42 countries. At Morgan Stanley, you’ll find an opportunity to work alongside the best and the brightest, in an environment where you are supported and empowered. Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences. We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry. There’s also ample opportunity to move about the business for those who show passion and grit in their work.

To learn more about our offices across the globe, please copy and paste https://www.morganstanley.com/about-us/global-offices into your browser.

Certified Persons Regulatory Requirements:

If this role is deemed a Certified role and may require the role holder to hold mandatory regulatory qualifications or the minimum qualifications to meet internal company benchmarks.

Flexible work statement

Interested in flexible working opportunities? Morgan Stanley empowers employees to have greater freedom of choice through flexible working arrangements. Speak to our recruitment team to find out more.

Morgan Stanley is an equal opportunity employer committed to building and maintaining a workforce that is diverse in experience and background. Our recruiting efforts reflect our strong commitment to a culture of inclusion, where individuals are hired, developed, and advanced based on their skills and talents.

Our workforce reflects a broad cross-section of the global communities in which we operate, bringing a variety of backgrounds, talents, perspectives, and experiences.

For more information, please visit: https://www.morganstanley.com/people-opportunities/eeo.