Senior Security Architecture Specialist

Job description

In the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities. This is a Senior Security Architecture Specialist position at Vice President level, which is part of the job family responsible for providing specialist cyber expertise and creating solutions that protect the organization's systems and networks against actual and potential security threats and vulnerabilities. Morgan Stanley is an industry leader in financial services, known for mobilizing capital to help governments, corporations, institutions, and individuals around the world achieve their financial goals. Interested in joining a team that's eager to create, innovate and make an impact on the world? Read on. We're seeking someone to join our team as a Senior Security Architecture Specialist in Cyber to be responsible for the security design tooling and security architecture standards across the firm - translating compliance obligations into operable, developer friendly architecture patterns, while directly operating the design governance toolchain that makes those standards real. What you'll do in the role: Architecture governance Steward the security architecture standard across all verticals - ADRs, threat models, trust boundaries, and control plane design Produce compliance traceability artifacts mapping architecture decisions to compliance requirements Drive cross team architecture through influence with principal engineers and engineering leads Support security standards, create templates and patterns to increase the efficiency and adoption of security programs. Living Spec & Design Governance Operate and evolve the design governance toolchain Define the ADR lifecycles from creation to deprecation and ensure decision records remain the authoritative reference for architecture choices Build integrations between spec platform and dev tooling to make compliance traceability continuous, not periodic What you'll bring to the role: Bachelor's degree with 7+ years of work experience in the IT field or equivalent. Demonstrated experience designing and governing SDLC security controls at scale - SAST, SCA, OSS governance, and container scanning. Hands-on experience with policy as code frameworks (OPA, Sentinel, or equivalent) and the ability to review…