{"id":3468032,"url":"https://alion.io/job/morgan-stanley-cyber-incident-manager","title":"Cyber Incident Manager","company":{"id":40230,"name":"Morgan Stanley","domain":"morganstanley.com","url":"https://alion.io/company/morgan-stanley","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Eightfold","truth_index":{"grade":"B","score":84,"open_postings":191,"ghost_share":0,"stale_share":0.424,"repost_share":0.021,"time_to_fill_p50_days":60,"computed_at":"2026-10-31T05:58:55Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Glasgow, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":52000,"max_usd":118000,"period":"year","method":"role_country_seniority_unknown","sample_n":159},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[],"status":"live","first_seen_at":"2026-10-23T00:00:00Z","employer_posted_date":"2026-10-29","last_verified_at":"2026-10-31T21:58:58Z","board_verified":true,"closed_at":null,"days_open":8,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":8},"description":"We’re seeking someone to join our team as a Cyber Incident Manager to support and lead the management of global cyber events and incidents. To succeed in this role, you will need a mix of cybersecurity knowledge, communication skills, people skills, operational experience, and the ability to solve complex problems. As a member of our pro-active, pragmatic, and energetic team, you are in the unique position to interact with people and teams globally, across all levels of the Firm, and drive the decisions required to protect the Firm.\nIn the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities.\nThis is a Risk & Resiliency Management Manager position at Director level, which is part of the job family responsible for identifying, assessing, and mitigating risks to ensure operational continuity and resilience in the face of potential threats or disruptions that could impact the organization, plus management of ongoing incidents.\nSince 1935, Morgan Stanley is known as a global leader in financial services, continuously evolving and innovating to better serve our clients and our communities in more than 40 countries around the world.\nAbout the Division:\nFusion Response and Recovery leads rapid and comprehensive Response and Recovery operations to minimize impact from a broad range of potentially business disrupting, to significantly impacting, threats and incidents, from cyber and fraud to technology incidents, weather events, terror attacks, geopolitical unrest & pandemics, collaborating with partner organizations to Understand, Prepare, and Learn from these events.\nFusion's 24/7 proactive follow-the-sun model is the cornerstone of the Firm's operational response and resilience capability with locations in New York, Alpharetta, London, Glasgow, Hong Kong, Tokyo, and Singapore.\nAbout the Team:\nThe Fusion Cyber Enterprise Management (CEM) team is responsible for orchestrating the Firm-wide response to consequential fraud, information security or business disrupting events and incidents introduced because of the malicious use of technology and/or a third-party incident. In partnership with cyber, technology and business stakeholders, CEM develop a plan to rapidly mitigate business, regulatory or reputational impact through calculated severity scoring, stakeholder engagement and tiered communications.\nAbout the Role:\nA typical day involves providing coverage for the EMEA CEM Team. You will take ownership of assigned incidents and preparedness activities, exercising independent judgement within established frameworks and escalating complex or material decisions appropriately. You will collaborate across the CEM team to manage escalations by assessing the risk/incident severity and engaging the key stakeholders to facilitate the required remediation, while ensuring the coordination of teams involved and providing timely incident communications. The position requires dynamic thinking during high pressure situations, organizational and situational awareness, sound judgement and a strong analytical ability.\nYou will also strengthen incident preparedness and continuous improvement by leading constructive post-incident reviews to document lessons learned and identify risk owners. Additionally, you will partner with key stakeholder teams to develop incident scenarios, playbooks and response drills.\nWhat you’ll do in the role:\nAbility to communicate clearly and effectively in complex situations, both verbally and in writing, with all levels of the organization.\nPractical experience in cybersecurity (or associated field), with the ability to interpret technical findings and understand their implications for incident response and business risk.\nCrisis management skills:\nAbility to lead conference calls with large groups of geographically dispersed stakeholders.\nAbility to prioritise effectively and exercise sound judgement.\nAbility to distil technical and complex information into easily understood business terms.\nAbility to coordinate technical workstreams (e.g. forensic investigations) alongside non-technical workstreams (e.g. data impact reviews and external communications) to mitigate risk and impact.\nAbility to drive your own learning, proactively identify gaps in understanding, and be receptive to constructive feedback.\nWhat you’ll bring in the role:\nExperience working for a global distributed organization conducting 24/7 operations.\nExperience applying AI to improve operational processes, ideally within cybersecurity or incident response.\nExperience translating operational needs into clear tooling requirements and contributing to solution design with technology teams.\nProven troubleshooting skills including a strong sense of commitment and drive towards incident resolution.\nExperience working in complex or regulated environments.\nCertifications such as: Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM) or SANS Certifications (GCIH, GSEC, etc.), or equivalent practical experience. \nWHAT YOU CAN EXPECT FROM MORGAN STANLEY:\nAt Morgan Stanley, we raise, manage and allocate capital for our clients - helping them reach their goals. We do it in a way that’s differentiated - and we’ve done that for 90 years. Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren’t just beliefs, they guide the decisions we make every day to do what's best for our clients, communities and more than 80,000 employees in 1,200 offices across 42 countries. At Morgan Stanley, you’ll find an opportunity to work alongside the best and the brightest, in an environment where you are supported and empowered. Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences. We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry. There’s also ample opportunity to move about the business for those who show passion and grit in their work.\nTo learn more about our offices across the globe, please copy and paste https://www.morganstanley.com/about-us/global-offices into your browser.\nCertified Persons Regulatory Requirements:\nIf this role is deemed a Certified role and may require the role holder to hold mandatory regulatory qualifications or the minimum qualifications to meet internal company benchmarks.\nFlexible work statement\nInterested in flexible working opportunities? Morgan Stanley empowers employees to have greater freedom of choice through flexible working arrangements. Speak to our recruitment team to find out more.\nMorgan Stanley is an equal opportunity employer committed to building and maintaining a workforce that is diverse in experience and background. Our recruiting efforts reflect our strong commitment to a culture of inclusion, where individuals are hired, developed, and advanced based on their skills and talents.\nOur workforce reflects a broad cross-section of the global communities in which we operate, bringing a variety of backgrounds, talents, perspectives, and experiences.\nFor more information, please visit: https://www.morganstanley.com/people-opportunities/eeo.","description_format":"text","description_chars":7460,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible schedule"],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Asset Management & Funds","Information Security","Online Brokerage & Trading Platforms"],"lifecycle":[{"event":"open","at":"2026-10-29T15:59:42Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"evidence":"Licensed UK visa sponsor (Senior or Specialist Worker, Skilled Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Global Business Mobility: Senior or Specialist Worker; Skilled Worker","cap_exempt":false,"checked_at":"2026-10-31T06:23:40+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":8,"expected_fill_days":60,"reasons":["conf:2","velocity","win:early","comp:brand"],"computed_at":"2026-10-31T05:58:55Z"},"pay":null,"html_url":"https://alion.io/job/morgan-stanley-cyber-incident-manager","json_url":"https://alion.io/job/morgan-stanley-cyber-incident-manager.json","meta":{"generated_at":"2026-10-31T23:39:18Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":37043,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":40230},"rest":"https://alion.io/mcp/rest/get_company?id=40230"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmorgan-stanley-cyber-incident-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmorgan-stanley-cyber-incident-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmorgan-stanley-cyber-incident-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/morgan-stanley-cyber-incident-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmorgan-stanley-cyber-incident-manager"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3468032}},{"tool":"search_jobs","arguments":{"company":"morganstanley.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3468032},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}