Technical Program Manager – Cyber / Data Security

Job Summary

Responsible for leading complex data security programs that reduce firm‑wide risk, strengthen control execution, and advance the Firm’s Data Security Strategy. The role manages cross‑divisional delivery across Technology, Cyber, Business, Risk, and Control stakeholders, with accountability for planning, governance, milestone execution, risk and issue management, metrics reporting, and executive communication.

Responsibilities

• Lead data security risk reduction execution: coordinate delivery across DSRE workstreams, ensuring milestones, action plans, dependencies, and risk‑reducing outcomes are clearly defined, tracked, and achieved.
• Manage governance and executive reporting: prepare high‑quality updates for the Data Security Execution Governance Committee (DSEGC) and related forums, including program status, risks, issues, decisions, metrics, and path‑to‑green plans.
• Drive milestone‑based delivery plans and BAU transition: establish integrated plans that support control implementation, adoption, operational readiness, evidence capture, and sustainable metrics‑based monitoring.
• Manage cross‑program dependencies: partner with related technology, cyber, risk, policy, and business programs to align scope, delivery sequencing, and control requirements.
• Strengthen data security metrics and risk reporting: work with metrics owners to define KPIs, KRIs, thresholds, trends, and executive narratives that demonstrate measurable control effectiveness and risk reduction.
• Support emerging technology and AI security integration: identify opportunities to improve data protection governance for AI‑enabled use cases, external websites, APIs, SaaS platforms, and other evolving data movement channels.
• Develop program artifacts: maintain charters, roadmaps, stakeholder maps, RAID logs, action trackers, decision logs, program briefs, meeting materials, and executive‑level communications.
• Translate data into actionable insights for senior audiences: analyze program status, delivery trends, control metrics, risks, and dependencies.

Requirements

• At least 10 years demonstrable project management experience.
• Demonstrable track record of operating and delivering at program manager level – minimum 3 years.
• Experience leading change in a data security, cyber risk, technology controls, compliance, or regulatory environment.
• Experience producing executive‑ready program reporting, including milestone plans, RAID logs, KPI/KRI dashboards, OpenPages issue and action plan status, and governance materials for senior committees.
• Experience leading projects/programs using both waterfall and agile methodologies.

Skills

• Strong knowledge of data security, cyber controls, risk management, and technology governance, with familiarity across DLP, data discovery, encryption, identity and access management, incident response, API security, vendor risk, and third‑party data protection.
• Previous experience on data security, cyber risk, control remediation, regulatory, or assessment programs (strongly preferred).
• Proven ability to lead and drive delivery teams.
• Expertise in transitioning initiatives into business‑as‑usual, including change management.
• Capability to manage a risk‑based data security program, aligning milestones, evidence, metrics, issues, and action plans to measurable risk reduction.
• Skill in defining and tracking data security benefits such as improved control coverage, reduced residual risk, stronger governance, increased transparency, and sustainable BAU monitoring.
• Effective interpersonal and communication skills.
• Ability to create a sense of community among disparate project team members.
• Strong knowledge of techniques for planning, monitoring, and controlling programs.

What You Can Expect From Morgan Stanley

At Morgan Stanley, you’ll work alongside the best and brightest in an environment that supports and empowers you. The firm’s values—putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back—guide daily decisions. Employees benefit from comprehensive perks and benefits, collaborative teams, and ample opportunities for internal mobility for those who demonstrate passion and grit. The firm operates in 1,200 offices across 42 countries, supporting a diverse global workforce.

Compensation

Expected base pay for this role ranges from $195,000 to $275,000 per year at the commencement of employment. Final base pay is determined individually and is part of a total compensation package that may include commissions, incentive compensation, discretionary bonuses, short‑ and long‑term incentive plans, and other Morgan Stanley‑sponsored benefit programs.