Cyber, Privacy & Resilience Legal Counsel – Vice President

Overview

As a Vice President in the Cyber, Privacy & Resilience Legal team, you will advise Morgan Stanley entities in EMEA on cybersecurity, privacy, data, fraud and operational resilience matters. You will help develop an EMEA framework aligned with applicable laws and guide senior stakeholders through complex regulatory requirements. You will lead responses to incidents and regulatory inquiries, translating obligations into practical guidance. This role offers a path to shape regulatory strategy for emerging technologies and high-impact projects within a global financial services firm.

Responsibilities

• Provide principal legal advisory on cybersecurity, privacy, data, fraud and resilience to EMEA business units
• Assist in building and implementing an EMEA regulatory framework based on applicable laws
• Partner with stakeholders to navigate regulatory environments for emerging technologies
• Advise on data collection, storage, sharing, localization and transfer rules
• Guide on profiling, surveillance and tracking technologies constraints
• Lead legal responses to cyber, information security and operational incidents
• Advise on notices, disclosures and procedures for privacy and information security
• Handle information requests and regulator communications in privacy matters
• Manage regulatory investigations, litigation data disclosures or third-party data requests

Key requirements

• Qualified lawyer with 7+ years of experience
• Experience in or with financial services firms
• Deep knowledge of UK FCA/PRA OpRes rules, EU DORA, NIS2, Cyber Resilience Act, UK/EU GDPR
• Strong grounding in cyber risk, incident response, breach notification and security standards
• Ability to translate complex regulatory obligations into concise guidance
• Strong communication skills and executive presence
• Proven ability to manage multiple tasks and meet deadlines

• strong written and verbal communication
• executive presence
• interpersonal skills
• data protection and privacy laws (GDPR)
• EMEA regulatory landscape
• data localization and transfer restrictions

…