Senior Data Access Protection Engineering Specialist (Hybrid)

We're seeking someone to join our Data Access Protection Squad as a Senior Data Access Protection Engineering Specialist in Cyber to oversee the global platform infrastructure and delivery of advanced integration of technical solutions with a strong focus on DevOps, data analytics, data access protection and engineering excellence. In the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities. This is a Cyber Security Engineering position at Vice-President level, which is part of the job family responsible for providing specialist cyber expertise and creating solutions that protect the organization's systems and networks against actual and potential security threats and vulnerabilities. Since 1935, Morgan Stanley is known as a global leader in financial services, always evolving and innovating to better serve our clients and our communities in more than 40 countries around the world. Interested in joining a team that’s eager to create, innovate and make an impact on the world? Read on… What you'll do in the role: * Design and contribute to the implementation of enterprise Data Asset Protection platforms, aligned with firm wide Technology and Operations Risk objectives. * Translate regulatory, audit, and risk requirements into scalable engineering solutions that reduce manual controls and operational risk through automation. * Collaborate with stakeholders across Risk, Compliance, Legal, and Engineering to ensure technical solutions align with control and regulatory expectations. * Contribute to the architecture and evolution of data protection capabilities, including access controls, entitlement governance, policy as code, and automation frameworks. * Apply and adhere to established engineering and DevSecOps standards, including secure coding, CI/CD, observability, resilience, and reliability practices. * Participate in design reviews and technical discussions for complex and high-risk initiatives, providing sound engineering judgment and recommendations. * Develop, deploy, and maintain Python and PowerShell based services, DevOps pipelines, and platform tooling supporting data protection solutions. * Implement control monitoring, audit telemetry, and evidence generation directly within platforms and delivery pipelines in partnership with Risk and Audit teams. * Use analytics, metrics, and dashboards to identify trends, surface risk signals, and improve the effectiveness of data access and protection controls. * Contribute to a collaborative engineering culture by sharing knowledge, improving code quality, and aligning local technical work with broader platform strategy. What you'll bring to the role: * 7+ years of hands-on experience in software engineering, DevOps, or platform engineering, with experience as a technical implementation lead from production to deployment * Experience with data protection technologies, such as Varonis Platform Architecture, Active Directory and Zero Trust architectures. * Knowledge of cloud security principles and tools such as AWS Security Hub, Microsoft Azure Security Center, and Google Cloud Security Command Center. * Exposure to data analytics tools and techniques, including SQL, Splunk and SaaS platforms. * Experience with file/folder permissions, Active Directory (AD), and enterprise security tools. * Familiarity with Agile methodologies, Kanban, and Scrum practices. * Experience in Python frameworks, data structures, algorithms, and problem-solving. * Familiarity in PowerShell script development * Understanding of DevOps principles, including CI/CD pipelines (e.g. Jenkins, GitHub actions), source control (e.g. git), containerization (e.g., Docker), and orchestration tools (e.g., Kubernetes). * Experience in managing complex vendor relationships, plan roadmaps, define goals and priorities for...