Digital Asset Cyber and Fraud Risk Specialist - Vice President

About the Role

The Wealth Management (WM) Chief Data Office (CDO) sits within the WM Risk organization and strives to find the right balance between risk management and business enablement. The WM CDO’s mission includes preventing unauthorized access to or misuse of client sensitive data and assets, abiding by relevant privacy laws and regulations, effectively retaining and protecting information, and mitigating risks caused by inaccurate or incomplete WM data.

The WM Application Security Team within WM CDO works to ensure clients’ sensitive data and assets are protected and that appropriate controls are applied across technology assets, including emerging digital asset capabilities. This role seeks a Vice President to support digital asset risk management across cyber and fraud domains, assessing and enhancing the control environment for enterprise digital asset custody technologies.

Responsibilities

• Lead the risk assessment and control review of enterprise digital asset custody capabilities, including Fireblocks, wallet architecture, account structures, governance, and operating processes.
• Serve as a subject matter expert on key protection and secure signing mechanisms, including MPC- and HSM-based models, key generation and storage, rotation and recovery practices, and privileged access controls.
• Evaluate transaction policy controls designed to prevent unauthorized or unwanted transactions, including approval workflows, allowlisting, velocity or value thresholds, segregation of duties, and exception handling.
• Partner with cyber, fraud, product, operations, and engineering stakeholders to identify blockchain- and crypto-specific fraud typologies and define preventive and detective controls.
• Review technology architecture diagrams, data flows, and integration patterns to identify cyber, fraud, and control design risks across digital asset platforms and supporting services.
• Assess the risk implications of tokenized asset products and processes, including issuance, custody, transfer, redemption, settlement, and on-chain or off-chain dependencies.
• Support new product, platform change, and third-party risk reviews for digital asset and tokenization initiatives, ensuring alignment to the WM business risk appetite.
• Define and track metrics related to control coverage, policy exceptions, incidents, fraud trends, remediation progress, and residual risk.
• Liaise with Morgan Stanley’s central cybersecurity, fraud, and risk organizations to interpret requirements and apply them effectively within the WM environment.
• Clearly communicate risks, recommendations, and decisions to technology, business, and risk stakeholders.

Qualifications

• 7-10 years of relevant experience in cybersecurity, fraud risk, operational risk, technology risk, or digital asset risk management.
• Experience with enterprise digital asset custody or wallet technologies and strong familiarity with Fireblocks implementation and associated governance or control frameworks.
• Strong knowledge of key protection and secure signing mechanisms, including MPC, HSMs, key lifecycle management, approval workflows, and transaction signing controls.
• Understanding of transaction policy frameworks used to prevent unauthorized or unwanted digital asset movements, including allowlists, thresholds, dual controls, and exception management.
• Knowledge of blockchain- and crypto-specific fraud considerations, including account takeover, beneficiary or address manipulation, social engineering, scam exposure, and blockchain transaction finality.
• Ability to interpret technology architecture diagrams, application flows, and system interfaces and identify the implications for cyber and fraud risk.
• General knowledge of the tokenization ecosystem and risks associated with tokenized assets, smart contracts, issuers, service providers, and on-chain or off-chain operating models.
• Solid foundation in cybersecurity principles, including architecture risk identification, vulnerability management, secure SDLC concepts, and control design assessment.
• Ability to partner with stakeholders and drive complex initiatives to completion in a large matrixed organization.
• Excellent written and verbal communication skills, with the ability to communicate clearly at all levels within the organization.
• Exceptional critical thinking, problem-solving, and research skills, with the ability to independently manage multiple simultaneous workstreams and exhibit strong attention to detail.

Preferred Qualifications

• Experience supporting digital asset, tokenization, or blockchain-related programs within a financial services environment.
• Experience working with fraud strategy, investigations, transaction monitoring, or controls for payment or digital asset transaction flows.
• Familiarity with blockchain analytics, wallet screening, sanctions controls, or other tools used to monitor digital asset activity in complex enterprise environments.
• Experience with scripting, automation, or data analysis tools such as Python, SQL, or similar technologies.

Benefits

At Morgan Stanley, you’ll find an opportunity to work alongside the best and the brightest, in an environment where you are supported and empowered. Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences. We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry. There’s also ample opportunity to move about the business for those who show passion and grit in their work.

Pay

Expected base pay rates for the role will be between $110,000 and $190,000 per year at the commencement of employment. Base pay is only part of the total compensation package, which may also include commission earnings, incentive compensation, discretionary bonuses, other short and long-term incentive packages, and other Morgan Stanley sponsored benefit programs.