Digital Asset Cyber and Fraud Risk Specialist - Vice President

About this role

The Wealth Management (WM) Chief Data Office (CDO) sits within the WM Risk organization and strives to find the right balance between risk management and business enablement. WM CDO’s mission is to: prevent unauthorized access to or misuse of client sensitive data and assets; abide by relevant privacy laws and regulations; effectively retain, retrieve, and protect information and records at the Firm; and mitigate risks caused by inaccurate, untimely, or incomplete WM data.

The WM Application Security Team within WM CDO works to ensure that our clients’ sensitive data and assets are protected and that appropriate controls are applied across technology assets, including emerging digital asset capabilities.

Role Description

The WM Application Security Team seeks a Vice President to support digital asset risk management across cyber and fraud domains. This individual will help assess and enhance the control environment for enterprise digital asset custody technologies, including wallet architecture, key protection, secure signing mechanisms, and transaction policy controls designed to prevent unauthorized or unwanted transactions. The successful candidate will bring hands-on knowledge of enterprise custody operating models and specific familiarity with Fireblocks implementation, including workspace configuration, policy design, approval workflows, and supporting control considerations.

In addition to serving as a digital asset cyber risk officer, this role will partner closely with fraud, product, operations, technology, and business stakeholders to identify and assess blockchain- and crypto-specific fraud scenarios across custody, transfer, and tokenized asset use cases. The individual should be comfortable reviewing technology architecture diagrams and process flows, understanding the fraud and cyber implications of tokenized assets, and translating complex technical concepts into clear risk guidance for senior stakeholders while balancing risk remediation against business objectives.

Key responsibilities include:

· Leading the risk assessment and control review of enterprise digital asset custody capabilities, including Fireblocks, wallet architecture, account structures, governance, and operating processes · Serving as a subject matter expert on key protection and secure signing mechanisms, including MPC- and HSM-based models, key generation and storage, rotation and recovery practices, and privileged access controls · Evaluating transaction policy controls designed to prevent unauthorized or unwanted transactions, including approval workflows, allowlisting, velocity or value thresholds, segregation of duties, and exception handling · Partnering with cyber, fraud, product, operations, and engineering stakeholders to identify blockchain- and crypto-specific fraud typologies and define preventive and detective controls · Reviewing technology architecture diagrams, data flows, and integration patterns to identify cyber, fraud, and control design risks across digital asset platforms and supporting services · Assessing the risk implications of tokenized asset products and processes, including issuance, custody, transfer, redemption, settlement, and on-chain or off-chain dependencies · Supporting new product, platform change, and third-party risk reviews for digital asset and tokenization initiatives, ensuring alignment to the WM business risk appetite · Defining and tracking metrics related to control coverage, policy exceptions, incidents, fraud trends, remediation progress, and residual risk · Liaising with Morgan Stanley’s central cybersecurity, fraud, and risk organizations to interpret requirements and apply them effectively within the WM environment · Clearly communicating risks, recommendations, and decisions to technology, business, and risk stakeholders

Qualifications:

· 7-10 years of relevant experience in cybersecurity, fraud risk, operational risk, technology risk, or digital asset risk management · Experience with enterprise digital asset custody or wallet technologies and strong familiarity with Fireblocks implementation and associated governance or control frameworks · Strong knowledge of key protection and secure signing mechanisms, including MPC, HSMs, key lifecycle management, approval workflows, and transaction signing controls · Understanding of transaction policy frameworks used to prevent unauthorized or unwanted digital asset movements, including allowlists, thresholds, dual controls, and exception management · Knowledge of blockchain- and crypto-specific fraud considerations, including account takeover, beneficiary or address manipulation, social engineering, scam exposure, and blockchain transaction finality · Ability to interpret technology architecture diagrams, application flows, and system interfaces and identify the implications for cyber and fraud risk · General knowledge of the tokenization ecosystem and risks associated with tokenized assets, smart contracts, issuers, service providers, and on-chain or off-chain operating models · Solid foundation in cybersecurity principles, including architecture risk identification, vulnerability management, secure SDLC concepts, and control design assessment · Ability to partner with stakeholders and drive complex initiatives to completion in a large matrixed organization · Excellent written and verbal communication skills, with the ability to communicate clearly at all levels within the organization · Exceptional critical thinking, problem-solving, and research skills, with the ability to independently manage multiple simultaneous workstreams and exhibit strong attention to detail

Preferred Qualifications

· Experience supporting digital asset, tokenization, or blockchain-related programs within a financial services environment · Experience working with fraud strategy, investigations, transaction monitoring, or controls for payment or digital asset transaction flows · Familiarity with blockchain analytics, wallet

Similar jobs

• VP, Cyber, Technology and Information Security Risk - Digital Assets — Morgan Stanley · Dallas, Texas, United States
• Digital Assets Senior Manager — PwC · NY-New York | IN-Indianapolis | NC-Raleigh
• Security Risk & Engineering - Tech and Cyber Risk & Compliance - Senior Associate — PwC · NY-New York | GA-Atlanta | IL-Chicago
• Cross-Asset Risk - Investment Management - Vice President — Morgan Stanley · New York, New York, United States
• Risk Director, Financial Advisor Services - Digital, Data & AI — Vanguard · Malvern, PA
• Digital Assets - Vice President — Morgan Stanley · Purchase, New York, United States
• Security Risk & Engineering - Tech and Cyber Risk & Compliance - Senior Manager — PwC · NY-New York | GA-Atlanta | IL-Chicago
• Security Risk & Engineering - Tech and Cyber Risk & Compliance -Manager — PwC · NY-New York | GA-Atlanta | IL-Chicago