Lead Cloud Security Engineer - GCP

J.P. MORGAN; City Of London; On-site; GBP 65,000 - 90,000; Full time

Job summary

A prominent financial services firm in the UK is seeking a Cloud Security Engineer to enhance security for public cloud services. The role involves leading risk management strategies, advising on security practices, and mentoring junior engineers. Candidates should have a strong background in cloud security concepts and excellent analytical skills. Certifications like AWS or CISSP are preferred. This position offers the opportunity to work in a dynamic cybersecurity environment.

Qualifications

• Proficient experience in cloud security concepts.
• Strong analytical and problem-solving capabilities.
• Experience with managing multiple priorities.

Responsibilities

• Lead execution of information risk strategies for public cloud.
• Conduct risk assessments of cloud services and architecture.
• Advise on control requirements for cloud architectures.
• Review infrastructure-as-code for security alignment.
• Contribute to documentation and security initiatives.
• Collaborate with CTC teams on security operations.
• Mentor junior engineers.

Skills

Cloud security concepts

Analytical skills

Problem-solving skills

Communication skills

Cross-functional team work

Education

Formal training or certification in cloud security

Tools

Terraform

AWS

Azure

Google Cloud

CISSP

CCSP

Job description

Job Description

JPMorgan Chase & Co. (NYSE: JPM) is a top financial services firm with over $2 trillion in assets, operating in more than 60 countries. As a leader in investment banking and various financial services, the firm's Cybersecurity & Technology Controls (CTC) group partners with all business lines to enhance cybersecurity, access management, and controls. The CTC group focuses on enabling business operations while ensuring protection and resilience.

As a Cloud Security Engineer at JPMorgan Chase within the Cybersecurity & Technology Controls (CTC) group, your primary responsibility will be to ensure that Public Cloud is adopted in a secure and compliant manner. You will play an important role in identifying and managing risk related issues and actions with respective technology. You will have an eye for detail and an ability to see the big picture across security issues.

Job Responsibilities

• Lead the execution and continuous improvement of information risk and control strategies to secure public cloud assets.
• Conduct and oversee risk-based assessments of technology controls for cloud services, platforms, and architecture.
• Advise and guide business technology teams on firm control requirements and best practices across diverse cloud architectures.
• Review and provide feedback on infrastructure-as-code for cloud platform development, ensuring alignment with security standards.
• Develop and maintain documentation, and contribute to agile processes supporting security initiatives.
• Collaborate with CTC teams to ensure seamless integration with security operations, threat intelligence, IAM, and network security.
• Mentor junior engineers and contribute to knowledge sharing within the team.

Required Qualifications, Capabilities and Skills

• Formal training or certification on cloud security concepts and proficient advanced experience
• Strong analytical, problem-solving, and communication skills.
• Experience working in cross-functional teams and managing multiple priorities.

Preferred Qualifications, Capabilities and Skills

• Professional certifications (e.g., AWS, Azure, Google Cloud, CISSP, CCSP) preferred.
• Advanced understanding of public cloud security concepts and technologies.
• Hands‑on experience with cloud engineering, architecture, and infrastructure‑as‑code (Terraform, etc.).
• Familiarity with DevOps, CI/CD, and agile methodologies.
• Experience mentoring or training junior staff.

About Us

J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world's most prominent corporations, governments, wealthy individuals and institutional investors. Our first-class business in a first-class way approach to serving clients drives everything we do. We strive to build trusted, long‑term partnerships to help our clients achieve their business objectives.

We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.

About The Team

Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we're setting our businesses, clients, customers and employees up for success.