Cyber, Privacy & Resilience Legal Counsel – Vice President

Cyber, Privacy & Resilience Legal Counsel – Vice President

Location – Glasgow

JR036870

Morgan Stanley is seeking a qualified lawyer with experience in relation to data protection, privacy, operational resilience, fraud and cyber security laws in Europe, Middle East and Africa (EMEA) associated regulatory matters, investigations, and advisory legal work to join its Cyber, Privacy & Resilience Legal team.

Overview of Cybersecurity & Privacy Legal team.

Cyber & Privacy Legal is a global team that focuses on cybersecurity, privacy, fraud and operational resilience matters as it relates to all Morgan Stanley entities.

Primary Responsibilities

> Serve as a principal legal advisor for cybersecurity, privacy, data, fraud and operational resilience matters to all Morgan Stanley entities business units in EMEA.

> Assist in the development of a comprehensive cybersecurity, privacy, data, fraud and operational resilience framework based on applicable laws and regulations in EMEA.

> Partner closely with key stakeholders to provide strategic direction to the Firm as it navigates complicated regulatory environment, in particular in relation to emerging technologies and other strategic projects;

> Advise on requirements and restrictions on the collection, storage and sharing of client and employee information including data localisation and data transfer restrictions, banking secrecy and other data related laws and regulations.

> Advise on restrictions on profiling, surveillance, monitoring and the use of tracking technologies.

> Serve as lead counsel responding to and managing cyber, fraud, information security and operational incidents, including notification obligations to regulators, clients and other third parties.

> Advise on requirements for notices, disclosures, policies and procedures for privacy and information security, consistent with applicable laws and regulations in EMEA.

> Advise on information request including in relation to individual's exercising their privacy rights, regulatory investigations, litigation data disclosures or other data request by third parties.

What we’re looking for

> Qualified lawyer with a minimum of 7+ years' experience, including experience in or with financial services firms and deep knowledge of UK FCA/PRA OpRes rules, EU DORA, NIS2, Cyber Resilience Act, UK/EU GDPR and other related law, such AI, marketing related laws.

> Strong grounding in cyber risk, incident response, breach notification, and security standards, in particular the ability to guide notifications, liability, communications, and regulator engagement during incidents.

> Ability to interact and effectively advise senior members of the Firm and its business units and translate complex regulatory obligations into concise practical guidance.

> Strong problem-solving skills and ability to understand practical solutions to legal problems a must

> Polished written and verbal communication skills; position requires executive presence

> Strong interpersonal skills and ability to work in a group or independent setting

> Proven track record of meeting deadlines, learning quickly, taking the initiative, working proactively, being resourceful and shouldering additional responsibility

> Ability to manage multiple tasks concurrently in an efficient and effective manner

> International Association of Privacy Professionals (IAPP) Certification helpful, but not required

> Technical background and knowledge of information security principles preferred but not required.

#GLGC

WHAT YOU CAN EXPECT FROM MORGAN STANLEY:

At Morgan Stanley, we raise, manage and allocate capital for our clients – helping them reach their goals. We do it in a way that’s differentiated – and we’ve done that for 90 years. Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren’t just beliefs, they guide the decisions we make every day to do what's best for our clients, communities an