Lead technology and cyber risk management for the bank's 2nd Line, advising on regulatory requirements (resiliency, outsourcing, privacy, AI, cloud), reviewing impacts and significant security events, applying data analytics to assess controls, and partnering with stakeholders to embed compliant, risk-mitigating practices.
As a world leading bank, our culture is all about thinking outside the box, challenging the status quo and striving to be best-in-class.
As a Technology & Cyber Risk Management Lead in our Technology & Cyber CCOR organisation you will have the opportunity to materially contribute and develop the Technology Compliance programme through your deep knowledge and experience of European and Global technology and cybersecurity laws, rules and regulations. You will work closely with the wider Technology & Cybersecurity CCOR team who is responsible for the design, implementation and oversight of the 2nd Line of Defence independent risk management program for technology and cybersecurity risks. As part of the team, you will also be able to broaden this platform to work on legal entity, regional and global initiatives, in addition to being part of local and firmwide community, and Diversity, Opportunity and Inclusion initiatives.
Job responsibilities
Provide guidance to Technology on people, process, programs, projects and products related to regulatory requirements for resiliency, outsourcing, data loss prevention, Privacy, AI and cloud technology
Review regulations and impact assessments, and work with divisional partners to advise the relevant owners on the development of policies and procedures within the legal entity and across other group legal entities as necessary
- Keep abreast of emerging technologies and related regulatory and legislative changes and provide advice to enable Technology and the business to implement applicable changes and operate in a compliant and controlled manner
- Support the review of significant events (including security events) over a defined economic threshold, including but not limited to, examination of event and resolution, back-testing against the firm’s risk management framework results, metrics, escalations, reporting, and scenarios
- Provide guidance for appropriate application of policies, standards and procedures by employing data analytics on critical systems of records to identify potential issues and areas of risk in a highly efficient manner
- Provide guidance related to the adoption of technologies including Cloud and AI/ML
- Participate in the assessment of emerging risks as part of strategic business risk reviews, analysis of regulatory and market developments, New Business Initiative Approvals and review of external risk events
- Collaborate and engage with the regional or line of business conduct, compliance, and operational risk leads
- Build strong relationship with Technology stakeholders as their trusted strategic advisor
Required qualifications, capabilities, and skills
- Strong expertise in architecture, design and operation of highly complex systems for global businesses in financial markets
- Strong analytical skills and a growth mindset keeping abreast of innovative use of technology and emerging technologies including agentic systems and Quantum
- Professional experience in risk management, compliance, or technology-related fields.
- Strong technical experience in technology, cybersecurity, governance, operational risk or technology compliance within the financial services industry or experience in an equivalent role in the technology industry
- Knowledge and experience with Information Security and Risk Management standards and frameworks such as NIST, ISO 27001/27002 and modern development practices and supporting toolsets (e.g. Agile, DevOps, AI assisted coding)
- Ability to understand complex technical systems and the business processes they support and synthesize the corresponding risks and controls and recommend adjustments if required
- Understanding of technology risk management and control principles with a proven ability to anticipate and identify risks and effective mitigating actions
- Strong organizational, project management, data analysis and modern data analytic techniques, multi-tasking and stakeholder management skills with demonstrated ability to manage expectations and deliver results with a high level of professionalism, self-motivation, and integrity
- Experienced in using AI tools to support data analytics and preparation of deliverables
Preferred qualifications, capabilities, and skills
- EMEA technology regulatory knowledge is preferred and an understanding of EU regulation (i.e. DORA, EU AI Act, , NIS etc.)
- Professional IT and Information Security certifications such as CISSP, CISA, CISM, CRISC, CGEIT as well as Cloud related certifications (e.g. CCSP, AWS Certified Practitioner) are beneficial
- Knowledge of innovative and automation technologies and supporting toolsets such Alteryx, UiPath, Qlik sense, Tableau etc
- Experience of implementing innovative methods of overseeing risks using modern data driven and analytical techniques would be a key advantage.
We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.
JPMorganChase London, England Office
25 Bank Street, Canary Wharf, London, United Kingdom, E14 5JP
Similar Jobs
Financial Services
Lead technology and cyber risk compliance for global banking technology. Advise on regulations (DORA, EU AI Act, NIS2), perform impact/gap assessments, review incidents, guide cloud and AI adoption, apply data analytics, and partner with stakeholders to embed controls and ensure operational resilience.
Top Skills:
AgileAi ToolsAi-Assisted CodingAi/MlAlteryxAWSCloudDevOpsIso 27001Iso 27002NistQlik SenseQuantumTableauUipath
Cloud • Fintech • Food • Information Technology • Software • Hospitality
Lead technical vision and execution for Support Center, communications, billing, and pricing systems. Build scalable self-service and account management platforms, apply AI/automation, define architecture standards, break cross-functional initiatives into deliverables, and coach engineers and managers to improve customer experience, operational efficiency, and revenue integrity.
Cloud • Fintech • Food • Information Technology • Software • Hospitality
Lead strategy and execution for Toast's Support Center, communications, and billing/pricing platforms. Build scalable self-service and account management systems, apply AI/automation to surface customer context and insights, set technical standards, break down cross-functional initiatives, and coach engineering managers to improve customer experience, operational efficiency, and revenue integrity.
What you need to know about the London Tech Scene
London isn't just a hub for established businesses; it's also a nursery for innovation. Boasting one of the most recognized fintech ecosystems in Europe, attracting billions in investments each year, London's success has made it a go-to destination for startups looking to make their mark. Top U.K. companies like Hoptin, Moneybox and Marshmallow have already made the city their base — yet fintech is just the beginning. From healthtech to renewable energy to cybersecurity and beyond, the city's startups are breaking new ground across a range of industries.
