Security Requirement Lead

<p><span><span>We're seeking someone to join our Cloud and Platform Security team in Cyber Data Risk &amp; Resilience as a Security Requirement Lead.</span></span><span> </span></p><p><span> </span></p><p><span><span>In the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities. This is a Cybersecurity Engineer position at Director level, which is part of the job family responsible for developing and maintaining software solutions that support business needs.</span></span><span> </span></p><p><span> </span></p><p><span><span>Since 1935, Morgan Stanley is known as a global leader in financial services, always evolving and innovating to better serve our clients and our communities in more than 40 countries around the world.</span></span><span> </span></p><p></p><p><b><span>What you'll do in the role:</span></b><span><span><span> </span></span></span><span> </span></p><p><span> </span></p><ul><li><p><span><span>Carry out in-depth security research and testing of cloud services across Microsoft Azure, AWS and GCP.</span></span><span> </span></p></li></ul><ul><li><p><span><span>Develop firm-wide security requirements that enable the secure use of cloud services at massive scale.</span></span><span> </span></p></li><li><p><span><span>Define and publish firm-wide security requirements that enable the secure use of cloud services at massive scale.</span></span><span> </span></p></li></ul><ul><li><p><span><span>Provide security expertise to engineering and development teams.</span></span><span> </span></p></li></ul><ul><li><p><span><span>Identify areas of risk on projects where security requirements cannot be fully addressed in the required time frame of the project. Identify and propose mitigating controls as necessary.</span></span><span> </span></p></li></ul><ul><li><p><span><span>Document and present those risks to senior business, IT and Security team members.</span></span><span> </span></p></li></ul><ul><li><p><span><span>Help identify areas of security the firm might want to invest in to improve IT security.<span> </span></span></span><span> </span></p></li></ul><p><span> </span></p><p><span> </span></p><p><span> </span></p><p><b><span>What you'll bring to the role:</span></b><span><span><span> </span></span></span><span> </span></p><p><span> </span></p><ul><li><p><span><span>Bachelor's degree in computer science, Information Security, or a related field, or equivalent 5-7 years of practical experience.</span></span><span> </span></p></li></ul><ul><li><p><span><span>Strong Information Security background with extensive experience in risk assessments and security architecture designs and reviews.</span></span><span> </span></p></li></ul><ul><li><p><span><span>Experience hardening cloud resource configurations to comply with internal and external regulations and controls.</span></span><span> </span></p></li></ul><ul><li><p><span><span>Detailed knowledge of cloud architectures and related security technologies (IAM, DLP, configuration assurance, security automation, GRC, etc.)</span></span><span> </span></p></li></ul><ul><li><p><span><span>In-depth knowledge of cybersecurity threat types, their composition and mitigation techniques.</span></span><span> </span></p></li></ul><ul><li><p><span><span>&gt; Strong critical thinking ability and cybersecurity mindset.</span></span><span> </span></p></li></ul><ul><li><p><span><span>Excellent communication / interpersonal skills to be able to interact at all levels &amp; be effective as part of a broader team, capable of taking broad objectives and create and execute a concrete plan.</span></span><span> </span></p></li></ul><ul><li><p><span><span>Experience in an information security role in an enterprise environment.</span></span><span> </span></p></li></ul><ul><li><p><span><span>Ability to write documentation for all types of audiences, from very specific technical guides to higher level research on technologies and vendors.</span></span><span> </span></p></li></ul><ul><li><p><span><span>Ability to manage expectations and handle high-pressure situations with tight deadlines</span></span><span> </span></p></li></ul><ul><li><p><span><span>Ability to quickly adapt to changing priorities and demands.</span></span><span> </span></p></li></ul><ul><li><p><span><span>Ability to work independently and self-motivate.</span></span><span> </span></p></li></ul><p><span> </span></p><p><b><span><span>You might also have:</span></span></b></p><p><span> </span></p><ul><li><p><span><span>Demonstrated cloud security experience with at least one of the major Cloud Service Providers (GCP, AWS, Azure)</span></span><span> </span></p></li></ul><ul><li><p><span><span>Experience with modern authentication technologies such as OAuth2, OpenID Connect and SAML 2.0.</span></span><span> </span></p></li></ul><ul><li><p><span><span>Familiarity with logging a