GRC CareersAGJ, the AI governance job boardPost a Job

Jobs › Central Outsourcing Control Office (COCO)

Central Outsourcing Control Office (COCO)

Morgan Stanley

Job at a glance

Category
GRC
Work arrangement
On-site
Location
Frankfurt, Germany
Posted
Aug 31, 2026
Apply for this jobApplications go directly to Morgan Stanley
Applying today? Most GRC roles fill fast. Get the next ones the day they post, in Frankfurt, Germany.

Free. One click to unsubscribe. We never share your address.

ShareEmailLinkedInXFacebookPrint / Save PDF

Morgan Stanley is hiring a Central Outsourcing Control Office (COCO) in Frankfurt, Germany. This is a GRC job in the governance, risk, and compliance field. Review the full details below and apply directly with Morgan Stanley.

About the Team The Central Outsourcing Control Office (COCO) is responsible for Morgan Stanley Europe SE's outsourcing governance framework and acts as the firm's independent second line of defense for outsourcing risk management. The team works closely with business units, support functions and legal entities across Europe to ensure compliance with internal policies and regulatory requirements, including EBA Outsourcing Guidelines, DORA and other applicable outsourcing regulations. Responsibilities Supporting the maintenance and development of the firm’s outsourcing framework and governance processes. Providing guidance to business units and support functions on outsourcing requirements and regulatory expectations. Performing reviews and testing of outsourcing controls, monitoring activities and regulatory compliance requirements. Coordinating outsourcing risk assessments and reviewing submissions from business and support functions. Maintaining and enhancing outsourcing inventories, data repositories and supporting documentation. Driving data quality initiatives and performing analyses to identify inconsistencies, gaps and improvement opportunities. Designing and implementing automation solutions to improve reporting, monitoring and inventory management processes. Developing dashboards, management information and reporting for senior management and governance forums. Delivering training and awareness sessions on outsourcing requirements and governance obligations. Supporting regulatory initiatives, audits and strategic projects related to outsourcing and third-party risk management. Skills and Experience Strong analytical and problem-solving skills. Excellent organizational skills and attention to detail. Strong written and verbal communication skills. Ability to manage multiple priorities in a fast-paced environment. Experience using Excel, Power BI, Power Query, Power Automate or similar tools, including AI tools such as Claude and ChatGPT, to support process automation. Interest in regulatory topics, operational risk and outsourcing governance. Ability to collaborate effectively with stakeholders across functions. Self-motivated, proactive and results-oriented. #LI-CM1 WHAT YOU CAN EXPECT FROM MORGAN STANLEY: At Morgan Stanley, we raise, manage and allocate capital for our clients – helping them reach their goals. We do it in a way that’s differentiated – and we’ve done that for 90 years. Our values - putting clients first, doing the right thing,

Full responsibilities and requirements are on Morgan Stanley's application page.

Apply for this job →
About Morgan Stanley
Hiring for governance, risk, and compliance jobs on GRC Careers.
Search all Morgan Stanley jobs →

Location and market context

This job is based in Frankfurt, Germany on-site. Local candidates benefit from being close to Morgan Stanley's teams and regional hiring market. Confirm the exact in-office expectation and any relocation support with the employer.

About third-party risk jobs

Third-party and vendor risk teams assess and monitor the security, privacy, and compliance posture of suppliers, an area under sharp regulatory and operational focus as AI vendors proliferate. Jobs like this one are typically evaluated against frameworks such as third-party risk frameworks, SOC 2, ISO/IEC 27001, and vendor due-diligence and monitoring practices.

How to position yourself for this third-party risk job

Strong candidates emphasize vendor due diligence and assessment, ongoing monitoring, contract and control requirements, and coordinating across security, privacy, and procurement. In your resume and outreach, tie your experience to how Morgan Stanley would apply third-party risk frameworks, SOC 2, ISO/IEC 27001, and vendor due-diligence and monitoring practices, and lead with concrete outcomes rather than duties.

Similar GRC jobs

Supervisor Supply Management Specialist (Chief Supply Chain Officer)
Veterans Health Administration
Johnson City, Tennessee$126k to $164k
Counsel - Third Party Risk Management
Everest Re Group
London, UK
Director, 3rd Party Security Risk
HealthEquity
$152k
Cybersecurity and Third-Party Risk Manager
Lord Abbett
Jersey City, NJ$95k to $110k
Risk Business Partner - Third Party Risk Management
FNZ
Edinburgh, UK
Assistant Chief Supply Chain Officer - ACSCO
Veterans Health Administration
Indianapolis, Indiana$107k to $140k
Get more jobs like this by email
We will email you new GRC jobs in Frankfurt, Germany as they post. Free and confidential, one click to unsubscribe.

Know your GRC? Take the 2-minute AI Governance Challenge. No signup needed.
Play now →

More GRC jobs: All GRC jobs · Search by category & location

Need help applying for this job?

Most people send the same résumé to forty roles and hear nothing. These three do something about that.

Free
Career Intelligence tools
Five AI tools: rank your matches, see what the role really demands, find the recruiter behind the posting, build an interview-ready company brief, and know your number before they ask.
Use the free tools →
$75
Résumé review by a GRC professional
A working GRC professional reads it line by line: what clears the ATS, what a hiring manager actually looks for, and which of your experience you are underselling.
Book a résumé review →
$75/hr
Coaching through your search
Someone who has run executive searches for 28 years, working your actual search with you: targeting, positioning, interviews and negotiation.
Book a coaching session →

Free tools need no account. Paid services are delivered by a person, not a template.