Leads technology and cyber risk management for financial markets platforms. Responsibilities include conducting technical risk deep dives, assessing and monitoring risks, designing and testing controls, reviewing architectures, validating evidence from logs and configurations, identifying attack paths through threat modeling, documenting deficiencies, and advising stakeholders on mitigation strategies and regulatory compliance.
As a Tech Risk & Controls Lead in the Cyber Security & Tech Controls (CTC) team, aligned to the Corporate Investment Banking division, you will be a key member of the Cyber Risk Management function supporting technology teams that build, operate, and deliver financial markets platforms and applications across the CIB Markets business. You will operate at the intersection of cybersecurity, engineering, and GRC—driving outcomes through hands-on technical analysis, practical control design, and evidence-based risk decisions.
You will contribute to the successful identification and management of technology-aligned aspects of Governance, Risk, and Compliance (GRC) in line with the firm’s standards, with a strong emphasis on practical implementation realities (architecture, infrastructure, SDLC, tooling, and operational resilience). Leveraging a deep technical and/or engineering background and broad risk management experience, you will identify, assess, and monitor risks and the implementation of effective controls across complex systems and environments. You will be expected to review architectures, interrogate technical designs, validate control effectiveness through artifacts/logs/configurations, and translate technical deficiencies into clear risk narratives for senior stakeholders.
Job responsibilities
- Identify risks: Conduct hands-on technical deep dives across a diverse portfolio of applications to identify emerging and upstream technology and cyber risks.
- Assess risk, monitoring & reporting: Assess, monitor, and report technology risks, ensuring compliance with firm standards, regulatory requirements, and industry best practices.
- Implement controls: Design & Support the implementation of effective controls in collaboration with cross-functional teams and stakeholders.
- Evaluate controls: Evaluate the effectiveness of existing controls, identify gaps, and recommend improvements to mitigate risks and enhance the firm’s risk posture.
- Analyze & mitigate: Analyze complex situations, advise on risk management strategies, and support the implementation of risk mitigation measures.
- Document & communicate: Document and articulate risks appropriately; raise issues and define action plans in partnership with application teams.
- Identify threats: Work closely with application teams to identify attack paths and threat vectors through threat modeling.
Required qualifications, capabilities, and skills
- Software and/or security engineering background, including experience with modern programming languages (e.g., Python) and cloud (AWS).
- Proven technology risk / information security experience, including risk identification, assessments, control testing, mitigation, and applying industry standards and best practices.
- Strong technical domain knowledge across Software Development Life Cycle (SDLC) and CI/CD, application resilience and security, IAM, data protection, and vulnerability management—especially for on‑prem and public-cloud environments in financial services.
- Analytical and execution skills to assess complex issues, synthesize data from disparate sources into a cohesive risk view, and design/implement pragmatic risk mitigation strategies.
- Strong stakeholder management: communicate clearly with senior leaders and build trusted, durable partnerships with LOB technologists to achieve shared outcomes.
- Governance- and control-oriented mindset, with working knowledge of risk frameworks and relevant regulations; motivated by enabling the business through strengthened controls.
Preferred qualifications, capabilities, and skills
- Industry-recognized risk certifications (e.g., CISM, CRISC, CISSP).
- Process-improvement mindset with a track record of reducing toil and building efficient, scalable processes.
- Experience with booking, pricing, and risk ecosystems (e.g., Athena, SecDb, Quartz, RICE, or equivalent) strongly preferred.
- Familiarity with large-scale Python codebases.
- Exposure to AI-driven risks and emerging threat patterns.
About UsJ.P. Morgan is a global leader in financial services, providing strategic advice and products to the world’s most prominent corporations, governments, wealthy individuals and institutional investors. Our first-class business in a first-class way approach to serving clients drives everything we do. We strive to build trusted, long-term partnerships to help our clients achieve their business objectives.
We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.
JPMorganChase London, England Office
25 Bank Street, Canary Wharf, London, United Kingdom, E14 5JP
Similar Jobs
Cloud • Information Technology • Security • Software • Cybersecurity
Administer EMEA benefits across employee lifecycle events, including enrollments, leavers, qualifying life events, leave claims, payroll data reconciliation, vendor audits, employee escalations, SOP documentation, and invoice reconciliation. The role also provides benefits concierge support, ensures data integrity and compliance, and uses AI tools, HRIS platforms, payroll systems, vendor portals, and advanced Excel to improve operational efficiency.
Top Skills:
Ai TechnologiesBenefits Vendor PortalsHrisExcelPayroll SystemsWorkday
Artificial Intelligence • Cloud • Security • Software • Cybersecurity
Source, screen, and close qualified candidates across multiple roles while delivering an excellent candidate experience. Responsibilities include partnering with leadership on interview processes, negotiating compensation, training interview teams, maintaining accurate Greenhouse data, and managing candidate communication throughout the hiring cycle.
Top Skills:
Greenhouse
Fintech • Legal Tech • Software • Financial Services • Cybersecurity • Data Privacy
Administer EMEA employee benefit programs, including onboarding, terminations, enrollment updates, renewals, open enrollment, invoice validation, and vendor coordination. Respond to employee inquiries, resolve issues within SLAs, maintain process documentation, support training, analyze benefits data, and identify process improvements. The role requires strong organization, communication, confidentiality, customer service, and proficiency with Microsoft products, HRIS, and vendor databases.
Top Skills:
HrisMicrosoft ProductsVendor Databases
What you need to know about the London Tech Scene
London isn't just a hub for established businesses; it's also a nursery for innovation. Boasting one of the most recognized fintech ecosystems in Europe, attracting billions in investments each year, London's success has made it a go-to destination for startups looking to make their mark. Top U.K. companies like Hoptin, Moneybox and Marshmallow have already made the city their base — yet fintech is just the beginning. From healthtech to renewable energy to cybersecurity and beyond, the city's startups are breaking new ground across a range of industries.
