Senior Cloud Security Architect — AWS & GCP, AI-Driven

JPMorgan Chase & Co.; Greater London; On-site; GBP 120,000 - 180,000; Full time

Job summary

JPMorgan Chase & Co. is seeking a Senior Cloud Security Architect to lead security architecture across cloud platforms and drive secure-by-design product initiatives.

You will collaborate with cybersecurity and engineering teams to embed threat modeling, implement automated guardrails, and elevate risk management for cloud services. The role emphasizes cross-functional leadership, strategic risk thinking, and hands-on architecture work in a fast-paced financial services environment, with a focus

Qualifications

• Hands-on cloud security expertise in AWS and GCP.
• Practical experience creating reference architectures and landing zones for engineering teams.
• Proven ability to design and deploy automated preventive guardrails at scale.
• Advanced threat modeling experience (e.g., STRIDE) for core cloud services.
• Extensive experience with CNAPP tools such as Wiz, including custom configuration rules and graph queries.
• Direct experience mapping cloud-native controls to frameworks like NIST CSF, ISO 27001, SOC2, or CIS Benchmarks.
• Deep operational knowledge of AWS and GCP native security suites.
• Proficiency in applying the Security Pillar from AWS and Google Cloud Architecture Frameworks.
• Ability to solve design and functionality problems independently.
• Strong written and verbal communication skills.
• Demonstrated success in influencing peers and stakeholders.
• Ability to evaluate and recommend emerging technologies for future state architecture.
• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support cybersecurity architecture workflows with strong validation habits and awareness of data sensitivity.
• Ability to assess and validate AI-assisted security recommendations before adoption, escalating uncertainty and ensuring outcomes align to security, resiliency, and auditability expectations.

Responsibilities

• Cultivate a security-first culture across product, technology, and business teams.
• Embed threat modeling and architecture reviews to drive adoption of secure controls.
• Serve as the security thought leader and escalation point for IT Risk and Cyber domains.
• Act with urgency to manage emerging issues, monitor risk indicators, and recommend resolutions.
• Partner with colleagues and vendors to ensure effective technology risk management, especially in cloud and emerging tech.
• Support audit, regulatory, and risk activities, translating requirements into actionable controls.
• Identify and address unfamiliar technology components, applying critical thinking to uncover hidden risks.
• Share best practices and influence peers to drive continuous improvement in security.
• Uses enterprise-authorized AI capabilities within the work environment to accelerate cybersecurity risk analysis and control assessment, validating outputs and handling data according to sensitivity and security requirements.
• Drives reuse-first adoption of AI-assisted security validation within SDLC/toolchain routines, improving control testing, remediation quality, and traceability/auditability in line with resiliency expectations.

Skills

Cloud security

AWS

GCP

Threat modeling

CNAPP tools

Security architecture

Security controls

AI in security

Tools

Wiz

Job description

JPMorgan Chase & Co. is seeking a Senior Cloud Security Architect to lead security architecture across cloud platforms and drive secure-by-design product initiatives.

You will collaborate with cybersecurity and engineering teams to embed threat modeling, implement automated guardrails, and elevate risk management for cloud services. The role emphasizes cross-functional leadership, strategic risk thinking, and hands-on architecture work in a fast-paced financial services environment, with a focus