Tech Risk and Controls Lead -Cloud

Posted 19 Hours Ago
Be an Early Applicant
Singapore
Hybrid
Senior level
Financial Services
We’re one of the world’s biggest technology-driven companies
The Role
The role involves mitigating tech risks, ensuring compliance with operational standards, and providing expertise in risk management. Responsibilities include monitoring risks, engaging stakeholders for transparency, managing issue remediation, and assessing technology risk priorities in relation to the business roadmap.
Summary Generated by Built In

Job Description
Join our team to play a pivotal role in mitigating tech risks and upholding operational excellence, driving innovation in risk management.
As a Tech Risk & Controls Lead in Enterprise Technology, Cloud Foundational services team, you will be responsible for identifying, and mitigating compliance and operational risks in line with the firm's standards. You will also provide subject matter expertise and technical guidance to technology-aligned process owners, ensuring that implemented controls are operating effectively and in compliance with regulatory, legal, and industry standards. By partnering with various stakeholders, including Product Owners, Business Control Managers, and Regulators, you will contribute to the reporting of a comprehensive view of technology risk posture and its impact on the business. Your advanced knowledge of risk management principles, practices, and theories will enable you to drive innovative solutions and effectively manage a diverse team in a dynamic and evolving risk landscape.
Job responsibilities

  • Document and monitor operational risk and control environment to identify existing and emerging operational risk and issues
  • Evaluate and document issues related to changes in the risk environment and operational risk priorities
  • Identify and aggregate thematic risk related to findings and trends (including risk from other products and hygiene) to address within product/LOB
  • Assist product owner with identifying compensating controls for high severity risks
  • Engage 2nd line of defense to discuss risk posture and to obtain non-objection when required
  • Communicate heightened risk that is relevant to stakeholders and customers to ensure transparency and appropriate prioritization for remediation
  • Understand legal obligations applicable to the product and how the processes and associated controls provide evidence of compliance
  • Coordinate and monitor issue management to ensure timely and sustainable remediation and provide thematic analysis to identify trends
  • Maintain Risk Assessment Structure (RAS) in CORE to accurately represent critical processes and drive the right accountability
  • Partner with process owners to respond to internal and external audit and regulatory requests for information
  • Assess and influence technology risk priorities within the book of work that are aligned to control design in the LOB/product roadmap


Required qualifications, capabilities, and skills

  • Bachelor's Degree in Computer Science, Cybersecurity or related field
  • 5+ years of experience or equivalent expertise in technology risk management, information security, or related field, emphasizing risk identification, assessment, and mitigation
  • Strong experience in various Technology and Cyber domains, for e.g., Architecture, Vulnerability Management, Cloud, etc.
  • Ability to work with data from disparate sources to build a cohesive view on risk
  • Experience working in regulated industries, in particular leveraging technology standards, frameworks, compliance, and industry recognized best practice/standards (e.g., ITIL, NIST, ISO, PCI, SOC)
  • Collaboration with internal and external technology audits (3 rd Line of Defense), CCOR Operational Risk Management deep dives and testing (2 nd Line of Defense), and the ability to advocate on behalf of subject matter experts


Preferred qualifications, capabilities, and skills

  • CISM, CRISC, CISSP, or similar industry-recognized risk and risk certifications are preferred
  • Advanced level in Office 365 with proficiency combining data sources in Excel
  • Strong written and verbal communication skills with ability to effectively communicate and present security risk concepts with business and technology partners.
  • Preferable experience working in regulated industries, in particular leveraging technology standards, frameworks, compliance, and industry recognized best practice / standards (e.g. NIST, ISO, PCI, SOC)
  • Risk management expertise in AWS services is a big plus
  • Relevant industry certifications are preferable


About Us
J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world's most prominent corporations, governments, wealthy individuals and institutional investors. Our first-class business in a first-class way approach to serving clients drives everything we do. We strive to build trusted, long-term partnerships to help our clients achieve their business objectives.
We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.
About the Team
Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we're setting our businesses, clients, customers and employees up for success.

Top Skills

Cloud
Cybersecurity
The Company
289,097 Employees
Hybrid Workplace
Year Founded: 1799

What We Do

JPMorgan Chase & Co. (NYSE: JPM) is a leading global financial services firm with assets of $3.7 trillion and operations worldwide. The firm is a leader in investment banking, financial services for consumers and small businesses, commercial banking, financial transaction processing, and asset management. A component of the Dow Jones Industrial Average, JPMorgan Chase & Co. serves millions of consumers in the United States and many of the world’s most prominent corporate, institutional and government clients under its J.P. Morgan and Chase brands.

Technology fuels every aspect of our company and is at the heart of everything we do. With over 50,000 technologists globally and an annual tech spend of $12 billion, we are dedicated to improving the design, analytics, development, coding, testing and application programming that goes into creating high quality software and new products.

Learn more about technology at our firm, explore resources from our Distinguished Engineers, AI & ML researchers, and other experts; access the latest episode of our TechTrends podcast, and more at www.jpmorgan.com/technology. Information about JPMorgan Chase & Co. is available at www.jpmorganchase.com.

©2023 JPMorgan Chase & Co. All rights reserved. JPMorgan Chase is an Equal Opportunity Employer, including Disability/Veterans.

Why Work With Us

Our technologists work on a diverse range of solutions that include strategic technology initiatives, big data, mobile, electronic payments, machine learning, cybersecurity, enterprise cloud development, and other state-of-the-art technologies.

Gallery

Gallery
Gallery
Gallery
Gallery
Gallery
Gallery

JPMorganChase Offices

Hybrid Workspace

Employees engage in a combination of remote and on-site work.

Typical time on-site: Flexible
SG

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account