Director, Vulnerability Management Specialist

Role Overview

We're seeking a Director, Vulnerability Management Specialist to join our CDRR Technology team within Cyber in Core Platform Services. This role is crucial for driving program automation and strategy within vulnerability management.

The Technology division at Morgan Stanley leverages innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities. As a Director, you will provide specialist cyber expertise and create solutions that protect the organization's systems and networks against actual and potential security threats and vulnerabilities.

Since 1935, Morgan Stanley has been known as a global leader in financial services, continuously evolving and innovating to better serve clients and communities in over 40 countries worldwide.

What You'll Do In The Role

• Join the Commercial Vulnerability Management team within the Technology Risk department.
• Perform daily analysis of CVEs relevant to technology products used by the Firm.
• Proficiently apply CVSS scoring, factoring in compensating controls to refine scores.
• Escalate critical vulnerabilities to the CISO and senior management, initiating immediate action and triage.
• Manage a segment of products, forming strong relationships with technology owners to influence remediation priorities.
• Derive information from various Splunk views and indexes to support daily functions.

What You'll Bring To The Role

• 4 years of technology experience, including time in a technology risk function.
• Strong understanding of cyber exploit techniques and CVSS scoring of vulnerabilities in an enterprise IT environment.
• Understanding of technology components, interaction between layers, and services for applications and infrastructure.
• Experience with an enterprise reporting platform (Splunk preferred).
• Strong organizational, communication, and professional skills.

About Morgan Stanley

At Morgan Stanley, we raise, manage and allocate capital for our clients – helping them reach their goals. We do it in a way that’s differentiated – and we’ve done that for 90 years. Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren’t just beliefs, they guide the decisions we make every day to do what's best for our clients, communities and more than 80,000 employees in 1,200 offices across 42 countries. At Morgan Stanley, you’ll find an opportunity to work alongside the best and the brightest, in an environment where you are supported and empowered. Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences. We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry. There’s also ample opportunity to move about the business for those who show passion and grit in their work.

Key skills/competency

• Vulnerability Management
• Cyber Security Engineering
• CVSS Scoring
• Splunk
• Enterprise IT Security
• Technology Risk
• Exploit Techniques
• Vulnerability Remediation
• Network & System Security
• Program Automation