
Finance (FinRiA) - Business Unit Information Security Associate Glasgow, Scotland
Job description
Job Number:
3234403
DESCRIPTION
Glasgow
3234403
Information Security programs administered by FinRiA include, but are not limited to: Separation of Duties; Entitlements Management; Cyber Security and Data Leakage controls; inter departmental high risk transfers and broader Finance fraud risk
- Participate in Firm-wide information security related forums and governance committees that assist in identifying, raising and discussing BU-specific information security and fraud prevention requirements and in resolving any issues in partnership with Technology Risk and the Operational Risk Department
- Promote education and awareness around the Finance Information Security Program regarding Firm best practices in order to improve information security and fraud risk awareness and policy compliance with policies such as the Firm wide Anti-Fraud policy, the Global Funds Transfer policy and related procedures
- Provide guidance to Finance stakeholders on any exceptions to policy to ensure appropriate assessment of residual risk and identification of mitigating controls
- Work closely with internal stakeholders to identify, manage and remediate Separation of Duties conflicts across Global Finance
- Assist in production of monthly team reporting of Separation of Duties exceptions, Information Security and Supplier Risk metrics
- Work with Finance teams to capture in-depth process and control flows for Finance managed payment processes and other high-risk processes
- Assist with the Finance High Risk Transfer process arising from internal moves within the firm
- Assist with remediation work to automate, enhance and streamline information security processes in order to accurately identify, assess and mitigate related risks
- Liaise with the SOX team, Payment Governance and Fraud Ops on testing of fraud related controls within Finance and where necessary carry out additional assurance testing
- Identify control gaps and weaknesses in processes and applications that could give rise to a Fraud scenario
- Where required provide coverage for the team's Information Security or fraud related tasks and support the wider FinRiA team on ad-hoc requests
Morgan Stanley is a leading global financial services firm providing a wide range of investment banking, securities, investment management and wealth management services.
Where will you be working?
This role is based at our Glasgow office on Waterloo Street in the city center. This location has a wellness center, including gym and shower/changing facilities, GP, Prayer room, Canteen and onsite Starbucks.
Interested in flexible working opportunities? Morgan Stanley empowers employees to have greater freedom of choice through flexible working arrangements. Speak to our recruitment team to find out more.
Morgan Stanley is an equal opportunities employer. We work to provide a supportive and inclusive environment where all individuals can maximize their full potential. Our skilled and creative workforce is comprised of individuals drawn from a broad cross section of the global communities in which we operate and who reflect a variety of backgrounds, talents, perspectives, and experiences. Our strong commitment to a culture of inclusion is evident through our constant focus on recruiting, developing, and advancing individuals based on their skills and talents.
QUALIFICATIONS
- Been educated to Degree level or equivalent
- Prior Fraud Risk, Information Security or Operational Risk Management experience a plus
- Ability to work effectively on multiple projects under tight deadlines
- Proficiency with data management, End User Computing Tools (spreadsheets and databases) and other standard computing applications (PowerPoint and Word)
- Superior analytical thinking and problem solving abilities
- Excellent verbal and written communication skills, with the ability to communicate with key stakeholders and Management
- Intellectual curiosity with a focus on information sharing
- Strong relationship building skills
- Ability to understand and apply complex concepts
- Self-motivation and are a team player who brings a can-do approach