DLP Policy Specialist

Our Insights Personal Finance Market Trends Technology & Disruption Sustainability Diversity & Inclusion What We Do Wealth Management Investment Banking & Capital Markets Sales & Trading Research Investment Management Morgan Stanley at Work Sustainable Investing Inclusive Innovation About Us Core Values Leadership History Locations Diversity Sustainability Giving Back Technology Careers Students & Graduates Experienced Professionals LanguageEnglishFrench Single PositionView All JobsHybridDLP Policy SpecialistGlasgow, United Kingdom No longer accepting applications.Employment TypeFull timeJob LevelProfessionalYou are required to review the Firm’s Mobility Guidelines on careerhub/ prior to submitting your application to ensure you understand and abide by your obligations under the Firm policy.JOB LEVELAssociate (Professional)TIERP3We are seeking a candidate to join the Data Protection Services team as an Associate supporting Data Loss Prevention (DLP) inspection capability development and governance. In this role, you will contribute to the design, implementation, and ongoing support of DLP inspection controls across emerging and non‑standard data transfer channels, helping ensure alignment with firm policy, risk expectations, and technology standards. In the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities. This is a Cybersecurity Operations role at Associate level, which is part of the job family responsible for monitoring, detecting, and responding to security incidents to ensure the organization's systems and data are protected from actual and potential threats or breachesSince 1935, Morgan Stanley is known as a global leader in financial services, always evolving and innovating to better serve our clients and our communities in more than 40 countries around the world.What you will do in the role: Support the design and implementation of new DLP inspection capabilities across data transfer paths not currently covered by existing services.  Contribute to service definition, requirement gathering, and documentation to ensure alignment with firm standards.  Assist with expanding DLP inspection coverage across file transfer and cloud-based channels to reduce the risk of sensitive data exposure.  Participate in the evaluation of technologies and solutions to support new and evolving inspection requirements.  Contribute to DLP controls related to interactions with external AI and web-based services, including helping define requirements and inspection approaches.  Support the development of inspection rules and control logic to mitigate data leakage risks.  Coordinate with engineering, risk, and policy stakeholders to support implementation and ensure alignment with governance expectations.  Support ongoing governance activities, including requirement intake, documentation, and audit readiness, ensuring controls are implemented in a consistent and auditable manner. What you will bring to the role: At least 4 years' relevant experience would generally be expected in cybersecurity, data protection, or DLP-related roles, with practical exposure to control implementation or operational support.  Solid understanding of data loss risks across common channels such as file transfer, cloud applications, and web-based services.  Experience supporting technology initiatives, including involvement in requirements gathering, solution design, or implementation activities.  Ability to interpret technical and business requirements and contribute meaningfully to solution discussions.  Strong organizational and documentation skills, with experience supporting governance, audit, or control-related processes.  Demonstrated ability to collaborate effectively with technology, risk, and...