Non-Financial Risk Manager - CTIS

The NFR Cyber, Technology and Information Security (CTIS) Department is focused specifically on managing cyber, technology and information security risks, globally. NFR CTIS brings together rules management, standard setting, assessing risk, process and controls by technology domains, advising the business, and an oversight and testing function to provide a comprehensive risk management decision for cyber, technology and information security related risks. Cybersecurity, Information Security and Technology risk management is critical to ensure the confidentiality, integrity and availability of Firm Information, Systems and Assets. Cybersecurity risk refers to managing and protecting the Firm's information assets and operations from cyber threats, e.g., cyber events or attacks resulting from inadvertent or intentional acts involving deception, falsification, destruction, etc. Information Security risk refers to protecting the confidentiality, integrity and availability of Firm's information and systems, e.g., internal and external threats that could result in unauthorized disclosure, misuse, alteration or destruction of confidential information and systems. Technology risk refers to ensuring and protecting the availability, stability, capacity and recovery capabilities of the Firm's key systems, e.g., loss, damage or business disruption resulting from inadequate or failed processes, people and systems or from external events. Morgan Stanley is seeking a Risk professional to lead the Asia Cyber, Technology and Information Security (CTIS) Oversight Department within the Non-Financial Risk Organisation in Hong Kong at the Executive Director level. CTIS Risk Oversight is the practice of monitoring risks related to the confidentiality, availability and integrity of the Firm's systems and information including associated processes and controls. The successful candidate will be responsible for running a team focused on executing independent oversight and monitoring of risks and controls around the Firm's cyber, technology and information security risks. Primary Responsibilities The role includes the following primary responsibilities: Be a senior member of the global NFR CTIS team, providing regional and global views on CTIS risk management. As a senior member of the NFR CTIS team support and maintain the non-financial risk framework across the Asia entities to manage CTIS risks. Provide thought leadership to drive strategic and tactical evolution necessary to