Consultant Conversion - Vice-President, Lead Risk & Resil Mgmt

Reporting to the IAM policy and AM fleet enablement lead, the IAM Policy Coordinator is responsible for working with control owners to define, govern, and manage the lifecycle of Identity and Access Management (IAM) policies, standards, and procedures across the enterprise. Reporting within Cybersecurity or Technology Risk, this role shapes the firm's IAM control environment and ensures alignment with regulatory requirements, industry standards, and internal risk objectives. Additionally, the position will help drive transformation of Access Management fleet reporting through AI enablement.

IAM Policy Strategy & Governance Coordinate the end-to-end lifecycle of IAM policies, standards, and procedures, including development, approval, maintenance, and retirement. Help execute the enterprise IAM policy strategy aligned with cybersecurity and technology risk frameworks. Govern policy compliance across business and technology functions to ensure consistent control coverage. Policy Development & Maintenance Serve as the subject matter expert for IAM policy and standards development. Incorporate regulatory and industry requirements, including NIST, FFIEC, PCI, and other relevant frameworks. Maintain a forward-looking policy framework that addresses emerging technologies such as cloud services, APIs, AI, and non-human identities. Policy Adoption & Communication Lead policy rollout, awareness, and training initiatives. Collaborate with business and technology teams to embed IAM requirements into processes and solutions. Ensure clear documentation and communication of policy expectations across global stakeholders. Program Governance & Strategic Initiatives Help provide governance and policy leadership for enterprise IAM programs and transformation initiatives. Advise on strategic efforts involving identity lifecycle management, entitlement governance, privileged access management, authentication, and authorization.

6+ years of experience in Identity and Access Management, Cybersecurity, or Technology Risk, with a focus on governance, policy, controls, or risk management. Demonstrated experience developing and implementing enterprise technology policies and standards. Proven success leading complex, cross-functional initiatives in large organizations.

Understanding of IAM domains, including identity lifecycle management, authentication, authorization, privileged access management, and entitlement governance. Understanding of regulatory and industry frameworks such as NIST, FFIEC, and PCI. Exceptional written, verbal, and executive communication skills. Strong stakeholder management and influencing capabilities. Ability to translate technical controls into clear policy requirements and business expectations. Education & Certifications Bachelor's degree required. Advanced degree or relevant certifications preferred, including CISSP, CISM, CRISC, or equivalent. WHAT YOU CAN EXPECT FROM MORGAN STANLEY: At Morgan Stanley, we raise, manage and allocate capital for our clients – helping them reach their goals. We do it in a way that’s differentiated – and we’ve done that for 90 years.  Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren’t just beliefs, they guide the decisions we make every day to do what's best for our clients, communities and more than 80,000 employees in 1,200 offices across 42 countries. At Morgan Stanley, you’ll find an opportunity to work alongside the best and the brightest, in an environment where you are supported and empowered. Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences. We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry.