Wealth Management Privacy Risk Specialist

Job Description

The Wealth Management (WM) Chief Data Office (CDO) sits within the WM Risk organization and strives to find the right balance between risk management and business enablement. WM CDO’s mission is to: prevent unauthorized access to or misuse of client sensitive data and assets; abide by relevant privacy laws and regulations; effectively retain, retrieve, and protect information and records at the Firm; and mitigate risks caused by inaccurate, untimely, or incomplete WM data.

\n

The Privacy Risk Team within WM CDO is responsible for ensuring WM is compliant with increasingly complex U.S. and international consumer privacy laws. The team works to reduce regulatory and reputational risk while enabling the WM business to grow and achieve its strategic objectives.

\n

\n

Role Description

\n

The WM Privacy Risk Team seeks a privacy risk expert with experience handling U.S. and international privacy matters to advise business stakeholders on the privacy implications of in-flight and proposed activities. This individual will consult on requirements and restrictions regarding the collection, use, storage, and sharing of sensitive client, consumer, and employee information, including with respect to Morgan Stanley's potential expansion to new jurisdictions and increased usage of artificial intelligence. This individual will work cross-functionally with centralized privacy legal and compliance teams, business area legal coverage teams, business process and product owners, and technology partners. A successful individual will have strong problem-solving skills and an ability to marry legal guidance with an appreciation for business priorities and the complexity of control implementation.

\n

\n

Key responsibilities include:

\n

\n
• Provide subject matter expertise regarding applicable privacy regulations, laws, and industry standard procedures and controls
\n
• Assist with gap analysis and advise on required controls in the wake of new or amended regulations and laws
\n
• Advise Business stakeholders on privacy-related issues in products and services
\n
• Guide Business stakeholders and consult with legal and compliance colleagues to ensure the Privacy Impact Assessment process for WM systems, models, and third-party services is efficient, comprehensive, and effective at identifying risks and control requirements
\n
• Consult on data subject access rights requests as needed
\n
• Produce guidance and assist with training initiatives as needed
\n

\n

\n

Qualifications:

\n

\n
• In-depth knowledge of data privacy compliance laws including, but not limited to, General Data Protection Regulation (GDPR), California Consumer Privacy Act and amendments (CCPA/CPRA), Gramm-Leach-Bliley Act (GLBA), Fair Credit Reporting Act (FCRA), etc.
\n
• Working knowledge of digital privacy technologies and practices, including cookie consent frameworks, tracking technologies (e.g., pixels, tags), preference management tools, etc.
\n
• Experience advising all levels of an organization on privacy considerations and control implementation
\n
• Excellent written and verbal communication skills with the ability to translate complex legal concepts into practical business guidance
\n
• Proven track record of meeting deadlines, learning quickly, being resourceful, and shouldering additional responsibility
\n
• Familiarity with the financial services industry; preferably in the area of wealth management
\n
• Comfort challenging and escalating risks and decisions
\n
• Willingness to be flexible and agile when shifting business priorities or external forces impact team coverage needs
\n
• Ability to work collaboratively on a team, supporting and championing both individual and team success
\n