Security Consultant

Job Summary

I have been working on the Controls Engineering, Measurement and Analytics (CEMA) team. This team is responsible for implementing a program of Continuous Controls Monitoring (CCM) for Morgan Stanley. This program includes the full cycle of controls monitoring, to include defining measurements/metrics to measure the implementation and effectiveness of information security controls, implementing control measurements, reporting measured values and responding to control events identified by control measurements. This role is focused on the response function within the CCM program, focused on the governance and execution of efforts to conduct root cause analysis to diagnose control events, work with stakeholders to plan and conduct remediation activities and track remediations to closure. The role will be expected to : Work with GRC partners to define the working processes and artifact templates for the control event response portion of the CCM program Analyze data to conduct root cause analysis in partnership with SMEs to understand control drift, gaps, outages and other gaps Define and scope control event remediation efforts in cooperation with control owners and implementors Track control event remediations to closure and report status as necessary to stakeholders and leadership Skills Required Excellent problem solving skills Strong verbal and written skills to interact with global teams and customers Strong understanding of GRC to include industry cybersecurity frameworks Good Data analysis skills Good understanding of technology and information security controls such as authentication, data security, logging, application security and change management Skills desired Experience with process design Good understanding of risk management Strong skills with desktop productivity software for data analysis, such as Microsoft Excel Experience with data analysis using query and scripting languages such as SQL and Phyton Preferred Location: Mumbai