Associate - Applications Technology Audit

Job Description
Firm
Morgan Stanley is a leading global financial services firm providing a wide range of investment banking, securities, investment management and wealth management services. The Firm's employees serve clients worldwide including corporations, governments and individuals from more than 1,200 offices in 43 countries.

As a market leader, the talent and passion of our people is critical to our success. Together, we share a common set of values rooted in integrity, excellence and strong team ethic. Morgan Stanley can provide a superior foundation for building a professional career - a place for people to learn, to achieve and grow. A philosophy that balances personal lifestyles, perspectives and needs is an important part of our culture.

Division
IAD comprises Business, Risk and Technology Auditors; Subject Matter Experts (e.g., Risk, Data Analytics); and support functions that are responsible for ensuring the department adheres to professional, regulatory and Firm policies and procedures.
IAD provides independent assurance on the quality and effectiveness of the Firm's internal control, risk management, and governance systems and processes. It achieves this by identifying and assessing the operating risks of the Firm and evaluating the adequacy and effectiveness of the Firm's system of internal control.

Team: Application Technology (IT Audit)
The role will reside within the Internal Audit's Technology team in Mumbai. The team covers application technology, infrastructure and cyber security audits. Technology Auditors focus on the application and system infrastructure controls that manage business risks and are responsible for understanding, analyzing, and testing the technology controls, including those over data accuracy, completeness and processing, systems development, application security and entitlements, production management and technology governance.

Primary Responsibilities

• Work with the technology audit team, within Internal Audit, to manage/execute risk based audits
• Assess inherent business risks and assist in performing risk assessments at the business process level
• Test controls over applications and system infrastructure, including those over data accuracy, completeness and processing, systems development, change management, data security and entitlements, production management and technology governance
• Identify control gaps and open risks, raise insightful questions to identify root causes and business impact and draw the appropriate conclusions
• Work in close collaboration with colleagues located in overseas offices to support application technology audits. The candidate is expected to have excellent communication skills and ability to work as part of virtual teams
• Participate/ lead strategic initiatives and projects to enhance our audit approach and coverage.

Qualifications
Requirements

• Morgan Stanley is seeking a strong IT Audit candidate to cover the applications and system infrastructure supporting the Technology audit coverage in MS.

Knowledge

• Understand audit scope, prepare audit planning documentation, and plan and conduct walkthroughs
• Understand the financial system and reporting requirements as applicable to key business processes in scope and associated risks, and identify the key technology risks and controls that are impacted.

Skills and Qualities

• Masters'/ Bachelors' Degree (Computer Science or IT related preferred)
• CISA, CISSP or CPA certification (preferred, though not required)
• Two to three years of relevant experience in auditing technology controls, system interfaces, and data processing and security infrastructure, preferably with a good exposure to auditing front/middle/back office systems in Investment Banking companies
• Familiarity with COBIT, SOX, NIST and FFIEC
• Strong understanding of IT general controls
• Proven ability to manage and collaborate within teams, especially in a global team structure
• Strong written and verbal communication skills
• Proven ability to learn quickly and think critically
• Proven ability to work independently on multiple assignments, while meeting deadlines

Coverage

• Monday to Friday from 12:00PM to 9:00PM India time with flexibility on standard working hours for time sensitive matters (including India Public Holidays).
• Periodic evening calls with US and EMEA internal clients and vendors.

For further information, and to apply, please visit our website via the “Apply” button below.