Drimva

Morgan Stanley

VP, Cyber, Technology and Information Security Risk - Digital Assets

$95K–$170K

Dallas, Texas · On-site · Director · Full-time · Posted Sep 2, 2026

Experience
5+ years of technology and/or security risk-related work experience; preferably in financial services working with digital assets.
Education
Computer Science or Cyber / Information Security degree preferred but not essential.

About the job

Provides independent second-line oversight of cyber, technology, and information security risks across Morgan Stanley’s digital asset ecosystem, including custody, trading, and distributed ledger infrastructure.

What you'll do

  • Review digital asset risk exposures and assess the effectiveness of controls, escalating material gaps and influencing remediation and risk acceptance.
  • Improve risk visibility through metrics, reporting, and scenario analysis; report emerging risks and incidents.
  • Support regulatory obligations and engagement, build stakeholder relationships, and coach NFR CTIS team members.

What they ask for

  • Strong understanding of blockchain and Web3 activities, including crypto trading, wallets, tokenization, custody, digital identity, and associated rules and regulations.
  • Experience assessing or managing digital asset risks, including private key and wallet security, smart contract vulnerabilities, blockchain infrastructure, third-party dependencies, and transaction monitoring.
  • Excellent written and verbal communication, interpersonal, leadership, stakeholder management, and influencing skills.
  • Strong organizational, analytical, and problem-solving skills.

Nice to have

  • Financial services experience working with digital assets.
  • Technology/security risk management or audit experience; relevant certifications such as CISM, CISA, or CISSP.

Pay

$95,000 and $170,000 per year (base salary)

Tools

blockchain, Web3, crypto trading, wallet infrastructure, asset tokenization, smart contracts, distributed ledger technologies

Model-written summary · the original posting is authoritative

First seen Oct 28, 2026 · Last verified Nov 5, 2026 (UTC)