US Banks Operational Risk Vice President Vendor and Dedicated Business Risk Coverage

Morgan Stanley is a global financial services firm that maintains significant market positions in each of its business segments— Institutional Securities, Wealth Management, and Investment Management. Morgan Stanley, through its subsidiaries and affiliates, provides a wide variety of products and services to a large and diversified group of clients and customers, including corporations, governments, financial institutions, and individuals. Institutional Securities provides a variety of products and services to corporations, governments, financial institutions, and ultra-high net worth clients. Wealth Management provides a comprehensive array of financial services and solutions to individual investors and small to medium-sized businesses and institutions covering: financial advisor-led brokerage and investment advisory services; self-directed brokerage services; financial and wealth planning services; workplace services including stock plan administration; annuity and insurance products; securities-based lending, residential real estate loans and other lending products; banking; and retirement plan services.

Our U.S. bank subsidiaries, Morgan Stanley Bank N.A. (“MSBNA”), Morgan Stanley Private Bank, National Association (“MSPBNA”), collectively, (“the U.S. Banks”) accept deposits, provide loans to a variety of customers, including large corporate and institutional clients as well as high to ultra-high net worth individuals, and invest in securities. Lending activity recorded in the U.S. Bank Subsidiaries from the Institutional Securities business segment primarily includes Secured lending facilities and Commercial real estate loans. Lending activity recorded in the U.S. Bank Subsidiaries from the Wealth Management business segment primarily includes Securities-based lending, which allows clients to borrow money against the value of qualifying securities, and Residential real estate loans.

The Vendor Program Management Vice President position is responsible for supporting the US Banks Vendor Program Management Office and Business Risk Program.

The Operational Risk Vice President Vendor and Dedicated Business Risk Coverage is responsible for the following areas of responsibility:

• Actively support in the development, implementation, training, refinement and sustainability of a vendor risk governance framework

• Advise Business Units and other stakeholders in their due diligence assessments and activate the relevant downstream subject matter experts to assess risk mitigation

• Interfacing with Bank regulators and participating in regulatory discussions

• Monitor vendor risk on a continuous basis and produce reporting, metrics and escalate elevated risks

• Assist with day-to-day support for the Bank’s direct and indirect vendors, including the vendor lifecycle from on-boarding, contract reviews, periodic monitoring, risk assessments, expense management and termination

• Vendor Risk Lead for Contingency and Exit Plan program for critical service providers, inclusive of quality assurance reviews of contingency and exit plans and end-to-end process management (plan development, testing design and participation, and post-testing remediation)

• Perform due diligence activities assigned to Vendor Management to meet requirements under U.S. Banks’ New Product Approval Program

• Ensure appropriate governance of policies and procedures, and the US Bank’s framework adherence to key Office of the Comptroller of the Currency (OCC) and FFIEC regulatory requirements

• Risk management experience including governance, reporting, policy procedure review, audit/regulatory support.

• Forge relationships across senior leadership of the Bank, cross-divisions, including Information Technology, Legal & Compliance, Operations, Finance, etc

• Support the Bank’s execution of key projects and initiatives, including process, risk, and control identification and assessments, risk remediation, and operational readiness

• Implement sound risk management practices in support of the Banks Operational Risk frameworks, including Risk and Control Assessments (RCSA), Operational Risk Incident Management, Issues and Actions Management

Qualifications:

• Bachelor’s degree in Finance, Business or other related field

• 10+ years of relevant experience in risk management, documentation and governance in the financial services industry is a plus

• Familiar with Information Technology risks in general and Cloud technologies specifically (SaaS, PaaS, IaaS, Public & Private Cloud)

• Demonstrate an understanding of various compliance and regulatory areas (e.g. FFIEC, NIST)

• Strong sense of ownership, accountability, and entrepreneurial spirit