Internal Audit (IT) - Electronic Trading, Vice President (Hong Kong)

Company Profile

Morgan Stanley is a leading global financial services firm providing a wide range of investment banking, securities, investment management and wealth management services. The Firm's employees serve clients worldwide including corporations, governments and individuals from more than 42 countries.

As a market leader, the talent and passion of our people is critical to our success. Together, we share a common set of values rooted in integrity, excellence and strong team ethic. Morgan Stanley can provide a superior foundation for building a professional career - a place for people to learn, to achieve and grow. A philosophy that balances personal lifestyles, perspectives and needs is an important part of our culture.

Department Profile

Internal Audit is responsible for validating whether the Firm operates in a controlled environment with appropriate risk management processes. Auditors evaluate the adequacy and effectiveness of the Firm’s internal controls using a risk-based methodology developed from professional auditing standards. Internal Audit assists in monitoring the Firm’s compliance with internal guidelines set for risk management and risk monitoring, as well as external rules and regulations governing the industry. The team reports directly to the Board Audit Committee and helps verify whether the Firm meets all of its fiduciary responsibilities to shareholders, while adhering to corporate-governance standards and legal and regulatory requirements. Internal Audit comprises Business, Risk and Technology auditors. Business and Risk auditors focus on understanding the risks that the businesses face and the controls to mitigate those risks. Technology auditors focus on the application controls supporting business processes, including systems development, application security and entitlements, production management, and technology governance. Both groups are responsible for understanding, analysing and testing the controls to protect the franchise.

The Asia Internal Audit Department, as the 3rd Line of Defence (LOD), is responsible for audits across all Morgan Stanley businesses, support and control functions, including the 1st and 2nd LOD, in the region. The audits are designed to assess the adequacy of the control environment and to provide the Board Audit Committee and relevant regional committees with an independent assessment of risk across the Firm.

Job Description

Morgan Stanley is seeking a strong Technology Audit candidate to cover the applications and system infrastructure supporting the Institutional Securities business with focus on electronic trading. This role, based in Hong Kong, reports functionally to the Asia head of Technology Audit.

We will also consider candidates without audit experience that have relevant IT and electronic trading background and keen to develop a meaningful career with Internal Audit.

Technology Auditors focus on the application and system infrastructure controls that manage business risks and are responsible for understanding, analysing, and testing the technology controls, including those over data accuracy, completeness and processing, systems development, application security and entitlements, production management and technology governance.

Primary Responsibilities

Audit Execution

• Provide technology audit coverage in Institutional Securities integrated audits with focus on electronic trading through risk assessments, audit planning, testing, reporting, and issue closure verification

• Supervise audits from start to completion including the identification and reporting of issues.

Audit Planning

• Work with global team to coordinate audit planning activities

• Conduct risk assessments around electronic trading activities to help drive the risk-based audit plan.

Management Reporting

• Responsible for compilation of ad hoc and periodic reporting to senior stakeholders, e.g. Audit Committees, Regulators, etc

Resource Management

• Manage team supporting the area

• Review resource requirements for open needs and selection decisions

• Facilitate discussions to resolve resource conflicts

• Consult with colleagues globally for opportunities to optimise staffing

Stakeholder Management

• Build and develop strong stakeholder relationships in order to provide timely management updates and support the production of Internal Audit reporting.

Qualifications:

Qualifications

Experience and Skills

• At least 10 years of IT experience with a Financial Services, Brokerage Firm or a Public Accounting Firm with emphasis on the Financial Services Industry

• Must have internal audit, risk management or system development experience around electronic trading and processes

• Understanding of electronic trading regulatory landscape in Asia and impact on technology and data

• Proven ability to manage and supervise a portfolio of projects and assist in the scheduling and staffing of assignments

• Proven ability to partner with Technology and Financial Auditors and work within a team

• Must have a proven ability in communicating with senior Technology management

• Strong knowledge of audit procedures and ability to review and manage the quality of audit work

• Experience in auditing applications, interfaces, system infrastructure, data processing and computer general controls

• Strong written and verbal communication skills, in particular related to audit practices, e.g. auditee interviewing, drafting of audit issues and presentation of audit results

• Proven ability to manage multiple projects, while meeting deadlines with minimal supervision

• Proven ability to build strong relationships with both the Business Unit and Technology senior managers

• Understanding of control frameworks, e.g. COBIT, ITIL, ISO17799, COSO, CMMI

Professional Qualifications

• Graduate with a Bachelor’s Degree of higher (Computer Science or IT related preferred)

• IT Audit/Security related professional certifications (CISA, CISSP certifications)