Privacy Non- Financial Risk Director (AVP)

Overview

In this director role, you advance the privacy program across Morgan Stanley, guiding risk assessments, controls, and governance for PII processing. You’ll partner with cross-functional teams to implement regulatory requirements and monitor compliance activities. You shape privacy risk management through PIAs, metrics, and policy support, enabling responsible use of data. This position offers impact across business lines within a collaborative, compliance-driven environment.

Responsibilities

• Ensure adherence to compliance program principles, risk assessment methods, and internal control frameworks; support DPO metrics and reporting
• Conduct Privacy Impact Assessments (PIAs) for various technologies and systems
• Provide guidance to Privacy Business Unit/Regional Control Functional Leads
• Assist with implementing international privacy regulations and related controls through gap analysis and control deployment

Key requirements

• Knowledge of privacy compliance laws (CCPA, Reg P, GDPR, GLBA/FCRA, among others) and related controls
• Experience with privacy technology considerations (cookies, mobile devices, biometric and geolocation data) is desirable
• Proficient in Microsoft Word, Excel, PowerPoint
• Exceptional written and verbal communication with cross-functional collaboration
• Strong organizational skills, proactive work ethic, team-oriented
• Bachelor in any field or equivalent experience
• Typically 5+ years of relevant experience

• collaborative
• proactive
• strong communication
• Privacy laws and regulations (CCPA, GDPR, GLBA/FCRA, Reg P)
• Privacy Impact Assessments (PIAs)
• Risk assessments and gap analysis

…