Cyber, Privacy & Resilience Legal Counsel – Vice President

Cyber, Privacy & Resilience Legal Counsel – Vice President

Location – Glasgow

JR036870

Morgan Stanley is seeking a qualified lawyer to join its integrated Technology, Cyber, Privacy & Resilience Legal team, a combined legal advisory team supporting the Firm on technology, cyber, privacy, data, fraud and operational resilience matters across EMEA and globally coordinated initiatives.

The team provides integrated legal advice on artificial intelligence, cloud, digital accessibility and other emerging technologies, including the interpretation and practical implementation of applicable legal and regulatory requirements across the Firm.

The team also advises on cybersecurity, privacy, data, fraud and operational resilience matters, including data protection, incident response, investigations, regulatory engagement and advisory work for Morgan Stanley entities and business units in EMEA.

Role Positioning

As a key member of the team, you will act as a principal legal advisor across technology, cyber, privacy, data, fraud and operational resilience matters for Morgan Stanley entities and business units in EMEA, working closely with global colleagues on cross-border issues.

• You are an integral part of a dynamic and collegial team of in-house lawyers taking innovative approaches to solve complex legal challenges in a highly regulated environment.
• You are a proactive, collaborative self-starter who assesses legal risks as you work directly with colleagues to support the Firm on a wide variety of technology, data, cyber, privacy and resilience initiatives.
• You thrive in a fast-paced environment, build positive relationships with diplomacy and provide insightful, practical counsel to senior stakeholders.
• You are comfortable working with global colleagues and clients to handle complex, cross-border matters, and are open to new ideas with a mindset of continuous improvement.

Primary Responsibilities:

The role sits within a merged advisory team and provides broad coverage across the full spectrum of technology, artificial intelligence, cyber, privacy, data, fraud, governance and operational resilience matters.

Technology, AI and Emerging Technology Advisory

• Advise Morgan Stanley entities, business units and control functions on artificial intelligence, cloud and other emerging technologies, including the interpretation and practical implementation of applicable legal and regulatory requirements.
• Support the development and deployment of AI use cases and technology products, including through legal risk assessments, governance requirements, terms of use, disclaimers, training and standardised guidance.
• Advise on technology-related and AI-related contracts, including the development of Firm positions, contractual fallbacks and negotiation strategies.
• Advise on strategic projects, acquisitions and investments involving material technology or AI considerations.
• Contribute to external advocacy and responses to regulatory consultations concerning technology and emerging innovation.
• Provide advice on digital accessibility and emerging technologies, including quantum computing.

Cyber, Privacy, Data and Operational Resilience Advisory

• Serve as a principal legal advisor for cybersecurity, privacy, data, fraud and operational resilience matters to Morgan Stanley entities and business units in EMEA.
• Assist in the development of a comprehensive cybersecurity, privacy, data, fraud and operational resilience framework based on applicable laws and regulations in EMEA.
• Advise on requirements and restrictions on the collection, storage and sharing of client and employee information, including data localisation and data transfer restrictions, banking secrecy and other data-related laws and regulations.
• Advise on restrictions on profiling, surveillance, monitoring and the use of tracking technologies.
• Serve as lead counsel responding to and managing cyber, fraud, information security and operational incidents, including notification obligations to regulators, clients and other third parties.
• Advise on requirements for notices, disclosures, policies and procedures for privacy and information security, consistent with applicable laws and regulations in EMEA.
• Advise on information requests, including in relation to individuals exercising their privacy rights, regulatory investigations, litigation data disclosures or other data requests by third parties.

Cross-Cutting Responsibilities

• Partner with Compliance, Risk, Technology and business stakeholders to identify and implement legal and regulatory developments through relevant policies, frameworks, standards, controls and programmes.
• Partner closely with key stakeholders to provide strategic direction to the Firm as it navigates a complex regulatory environment, in particular in relation to emerging technologies and other strategic projects.
• Support regulatory examinations, enquiries and investigations relating to technology, AI, cyber, privacy, data, fraud and operational resilience.

Requirements

• Qualified lawyer in a UK or other Commonwealth jurisdiction.
• A minimum of 7+ years' relevant post-qualification experience, gained at a law firm, financial institution, technology company or comparably complex organisation, including experience in or with financial services firms.
• Demonstrable experience advising on technology law, preferably including artificial intelligence, cloud services, technology regulation, intellectual property and commercial technology contracts.
• Deep knowledge of UK FCA/PRA operational resilience rules, EU DORA, NIS2, the Cyber Resilience Act, UK/EU GDPR and other related laws, including AI and marketing-related laws.
• Strong grounding in cyber risk, incident response, breach notification and security standards, with proven ability to guide notifications, liability, communications and regulator engagement during incidents.
• Experience translating complex legal and regulatory requirements into practical governance, contractual and operational solutions.
• Experience in financial services or another highly regulated sector is required; broader regulated-sector exposure is advantageous.
• International Association of Privacy Professionals certification helpful, but not required.
• Technical background and knowledge of information security principles preferred but not required.

Skills and Qualities

• Ability to interact with and effectively advise senior members of the Firm and its business units, translating complex regulatory obligations into concise, practical guidance.
• Polished written and verbal communication skills; the position requires executive presence and the ability to distil and communicate information and ideas clearly and succinctly.
• Strong problem-solving skills and the ability to identify practical solutions to legal problems.
• Sound business judgement and the ability to assess legal risk while providing practical advice.
• Ability to work independently, form opinions and make decisions, while working collaboratively as part of a team, in a group or independent setting.
• Highly organised, with strong attention to detail, and ability to work under pressure in a fast-paced environment.
• Strong time management skills, with the ability to manage multiple projects and priorities concurrently in an efficient and effective manner.
• Proven track record of meeting deadlines, learning quickly, taking the initiative, working proactively, being resourceful and shouldering additional responsibility.
• Ability to anticipate emerging issues and escalate them appropriately.
• Intellectual curiosity and willingness to develop expertise in rapidly evolving technologies and regulatory frameworks.
• Ability to explain complex technology and legal concepts clearly to legal, technical and senior business stakeholders.

#GLGC

WHAT YOU CAN EXPECT FROM MORGAN STANLEY:

At Morgan Stanley, we raise, manage and allocate capital for our clients – helping them reach their goals. We do it in a way that’s differentiated – and we’ve done that for 90 years.  Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren’t just beliefs, they guide the decisions we make every day to do what's best for our clients, communities and more than 80,000 employees in 1,200 offices across 42 countries. At Morgan Stanley, you’ll find an opportunity to work alongside the best and the brightest, in an environment where you are supported and empowered. Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences. We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry. There’s also ample opportunity to move about the business for those who show passion and grit in their work.

To learn more about our offices across the globe, please copy and paste https://www.morganstanley.com/about-us/global-offices​ into your browser.

Certified Persons Regulatory Requirements:
If this role is deemed a Certified role and may require the role holder to hold mandatory regulatory qualifications or the minimum qualifications to meet internal company benchmarks.

Flexible work statement
Interested in flexible working opportunities? Morgan Stanley empowers employees to have greater freedom of choice through flexible working arrangements. Speak to our recruitment team to find out more.

Morgan Stanley is an equal opportunity employer committed to building and maintaining a workforce that is diverse in experience and background.  Our recruiting efforts reflect our strong commitment to a culture of inclusion, where individuals are hired, developed, and advanced based on their skills and talents.

Our workforce reflects a broad cross-section of the global communities in which we operate, bringing a variety of backgrounds, talents, perspectives, and experiences.

For more information, please visit: https://www.morganstanley.com/people-opportunities/eeo.