Senior Auditor - Cloud

JPMorgan Chase & Co.; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

JPMorganChase in London is seeking a Senior Auditor to join the Cloud Audit Team, helping shape risk management as we expand cloud platforms and AI capabilities.

You will assess the adequacy of cloud and AI control environments, support subject matter expert programs, and deliver end-to-end audits in line with professional standards.

The role requires clear stakeholder communication, root-cause analysis, and practical recommendations to strengthen controls across technology and business processes.

Qualifications

• Extensive cloud and AI experience required.
• Generative AI and agentic security risks knowledge (prompt injection, data poisoning).
• Experience with threat modeling, risk assessment or auditing cloud technologies (AWS, Google, Azure).
• Recognized cloud security certification (CCSP, CCSK, AWS certs).
• Strong understanding of internal control concepts and SDLC.

Responsibilities

• Support the subject matter expert program for Cloud and AI audit capabilities.
• Support end-to-end cloud audits in a risk-focused manner and in line with standards.
• Conduct integrated reviews of AI and cyber risks across technology products and applications.
• Communicate audit scope, risks and issues clearly to stakeholders.
• Evaluate and report on cloud control environment adequacy and effectiveness.
• Analyze risks and recommend improvements; provide overall opinion on controls.
• Finalize audit findings and drive clear communication of results to management.
• Build relationships with stakeholders to foster engagement and innovative thinking.

Skills

Extensive cloud experience

Generative AI risk knowledge

Auditing cloud technologies

Communication skills

Stakeholder management

Education

Bachelor's degree or relevant financial services experience

Tools

AWS

Azure

Google Cloud

CCSK/CCSP/AWS certs

A2A/MCP tool integrations

Job description

Join JPMorganChase’s Cloud Audit Team and help shape how we manage risk as we expand our use of cloud platforms and artificial intelligence.

As a Senior Auditor within our Cloud Audit Team, you will play a pivotal role in assessing the adequacy of the control environments for our firm's cloud and AI environments. Your responsibilities will include supporting the subject matter expert program for Cloud audit capabilities within the department, supporting end-to-end cloud and product audits in a risk-focused manner, and ensuring high standards in accordance with department and professional standards. Additionally, you will also provide subject matter expertise on critical AI and cyber risks on cloud as the firm increases adoption of AI products and solutions.

Job responsibilities

• Support the subject matter expert program for Cloud and AI audit capabilities within the department
• Support end-to-end cloud audits in a risk focused manner and to a high standard in accordance with department and professional standards
• Support integrated reviews of AI and cyber related risks for the firms technology products and business applications.
• Engage in clear communication with stakeholders relating to the audit scope, risks and issues
• Evaluate, test and report on the adequacy and effectiveness of the cloud control environment
• Analyze Risks and proactively identify the root-cause of issues with a view to providing recommendations for improvement where weaknesses are identified
• Finalize Audit findings and use judgment to provide an overall opinion on the control environment
• Drive communication of audit results and issues in a clear and concise manner, both verbally and in writing to Audit management and senior stakeholders
• Build and maintain key relationships with stakeholders and colleagues, establishing a culture of engagement while adding value, effective teamwork and innovative thinking

Required qualifications, capabilities and skills

• Extensive combined cloud and AI experience
• Bachelor's degree (or relevant financial services experience)
• Good deep understanding of Generative AI and Agentic security risks such as prompt injection, data poisoning etc.
• Experience working with either threat modeling, risk assessing or auditing cloud technologies (AWS, Google and Azure), Generative AI/agentic systems and tool integrations (A2A, MCP)
• Recognized cloud security certification (CCSP, CCSK, AWS certifications etc.)
• Solid understanding of internal control concepts with the ability to evaluate and determine the adequacy of controls by considering business and technology risks in an integrated manner.
• Knowledge of system development life cycle concepts with an ability to quickly learn a complex, distributed computing environment.
• Excellent verbal and written communication skills. Also, good interpersonal skills with the ability to present complex and sensitive issues to senior management, and influence change.

Preferred qualifications, capabilities and skills

• Degree and background in Technology
• Related professional certification such as CISA or CISSP