Vista previa de la oferta
Digital Forensics & Insider Risk Analyst
lead · Technology / Software Development
We’re seeking someone to join our Insider Risk Management function as a Digital Forensics & Investigations Lead within Cyber, Data, Risk & Resilience (CDRR), with a focus on leading end-to-end investigations with a disciplined, risk-based approach to evidence handling, proportionality, confidentiality, and regulatory defensibility.
In the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities. This is a Digital Forensics & Investigations Lead position at Vice President level, which is part of the job family responsible for providing specialist cyber expertise and creating solutions that protect the organization's systems and networks against actual and potential security threats and vulnerabilities.
Since 1935, Morgan Stanley is known as a global leader in financial services, always evolving and innovating to better serve our clients and our communities in more than 40 countries around the world.
What you'll do in the role:
- Lead and conduct digital forensic investigations
Lead and conduct digital forensic investigations
- Collect, preserve, and analyse digital evidence from a variety of sources
Collect, preserve, and analyse digital evidence from a variety of sources
- Apply investigative methodologies to correlate activity across multiple data sources
Apply investigative methodologies to correlate activity across multiple data sources
- Ensure investigations are conducted in line with Firm policies, legal requirements, and regulatory expectations
Ensure investigations are conducted in line with Firm policies, legal requirements, and regulatory expectations
- Produce clear investigative outputs, including timelines, findings summaries, and remediation recommendations
Produce clear investigative outputs, including timelines, findings summaries, and remediation recommendations
- Manage electronic discovery (eDiscovery) activities, including identification, preservation, collection, processing, and production of electronically stored information (ESI)
Manage electronic discovery (eDiscovery) activities, including identification, preservation, collection, processing, and production of electronically stored information (ESI)
- Design and execute data collection criteria across email archives, collaboration platforms, file shares, and enterprise systems
Design and execute data collection criteria across email archives, collaboration platforms, file shares, and enterprise systems
- Ensure compliance with data privacy, retention, and jurisdictional requirements
Ensure compliance with data privacy, retention, and jurisdictional requirements
What you'll bring to the role:
- Experience conducting digital investigations, including insider risk, incident response, or data exfiltration cases
Experience conducting digital investigations, including insider risk, incident response, or data exfiltration cases
- Ability to act as a primary point of contact for investigation and eDiscovery matters, managing cases from intake through closure
Ability to act as a primary point of contact for investigation and eDiscovery matters, managing cases from intake through closure
- Strong stakeholder management skills, with the ability to define scope, assess risk, and align on timelines and deliverables
Strong stakeholder management skills, with the ability to define scope, assess risk, and align on timelines and deliverables
- Coordinate across multiple teams and regions
Coordinate across multiple teams and regions
- Analytical mindset with the ability to synthesise information into clear findings and conclusions
Analytical mindset with the ability to synthesise information into clear findings and conclusions
- Strong SIEM analysis and data correlation skills, with experience working through complex datasets, analysing infrastructure and security logs
Strong SIEM analysis and data correlation skills, with experience working through complex datasets, analysing infrastructure and security logs
- Hands-on experience with digital forensic tools
Hands-on experience with digital forensic tools
- Strong working knowledge of Microsoft 365 (M365) environments
Strong working knowledge of Microsoft 365 (M365) environments
- Ability to clearly articulate complex technical matters to diverse stakeholders
Ability to clearly articulate complex technical matters to diverse stakeholders
- Strong understanding of technology risk, security concepts, and enterprise infrastructure
Strong understanding of technology risk, security concepts, and enterprise infrastructure
- Solid experience in eDiscovery, including message archive systems and formulation of complex search and collection criteria
Solid experience in eDiscovery, including message archive systems and formulation of complex search and collection criteria
- Experience working with Regulatory, Compliance, Litigation, or Investigations teams within the financial services industry
Experience working with Regulatory, Compliance, Litigation, or Investigations teams within the financial services industry
- Scripting or automation skills for investigative efficiency
Scripting or automation skills for investigative efficiency
- Experience working across multiple regions
Experience working across multiple regions
- Relevant security certifications (e.g. GCFE, GCFA, CISSP) are considered as an advantage
Relevant security certifications (e.g. GCFE, GCFA, CISSP) are considered as an advantage
#LI-hybrid
WHAT YOU CAN EXPECT FROM MORGAN STANLEY:
At Morgan Stanley, we raise, manage and allocate capital for our clients – helping them reach their goals. We do it in a way that’s differentiated – and we’ve done that for 90 years. Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren’t just beliefs, they guide the decisions we make every day to do what's best for our clients, communities and more than 80,000 employees in 1,200 offices across 42 countries. At Morgan Stanley, you’ll find an opportunity to work alongside the best and the brightest, in an environment where you are supported and empowered. Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences. We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry. There’s also ample opportunity to move about the business for those who show passion and grit in their work.
To learn more about our offices across the globe, please copy and paste https://www.morganstanley.com/about-us/global-offices into your browser.
Certified Persons Regulatory Requirements: If this role is deemed a Certified role and may require the role holder to hold mandatory regulatory qualifications or the minimum qualifications to meet internal company benchmarks. Flexible work statement Interested in flexible working opportunities? Morgan Stanley empowers employees to have greater freedom of choice through flexible working arrangements. Speak to our recruitment team to find out more. Morgan Stanley is an equal opportunity employer committed to building and maintaining a workforce that is diverse in experience and background. Our recruiting efforts reflect our strong commitment to a culture of inclusion, where individuals are hired, developed, and advanced based on their skills and talents.
Our workforce reflects a broad cross-section of the global communities in which we operate, bringing a variety of backgrounds, talents, perspectives, and experiences.
For more information, please visit: https://www.morganstanley.com/people-opportunities/eeo .