Senior Cloud Security Architect: AWS & GCP Strategy Leader

Testing Site - JPMC; Greater London; On-site; GBP 120,000 - 180,000; Full time

Job summary

JPMorgan Chase seeks a Senior Cloud Security Architect to lead cloud security across international product teams. You will partner with technology and business colleagues to identify security issues, embed threat modeling, and drive architecture reviews to ensure secure-by-design products.

In this role, you will influence product strategy, manage emerging risks, and act as a security SME across IT Risk and Cyber domains, with global collaboration and regulatory support.

Qualifications

• Hands-on cloud security experience in AWS and GCP.
• Experience creating reference architectures and landing zones.
• Ability to map cloud controls to standards (NIST CSF, ISO 27001, SOC2).

Responsibilities

• Cultivate a security-first culture across product, technology, and business teams.
• Embed threat modeling and architecture reviews to drive secure controls.
• Serve as security thought leader and escalation point for IT Risk and Cyber domains.
• Act with urgency to manage emerging issues, monitor risk indicators, and recommend resolutions.
• Partner with colleagues and vendors to ensure effective technology risk management, especially in cloud and emerging tech.
• Support audit, regulatory, and risk activities, translating requirements into actionable controls.
• Identify and address unfamiliar technology components, applying critical thinking to uncover hidden risks.
• Share best practices and influence peers to drive continuous improvement in security.

Skills

Cloud security architecture

AWS

GCP

Threat modeling

Infrastructure as Code

Security as Code

CNAPP tools

Landing zones

Secure by design

Tools

Wiz

Terraform

Job description

JPMorgan Chase seeks a Senior Cloud Security Architect to lead cloud security across international product teams. You will partner with technology and business colleagues to identify security issues, embed threat modeling, and drive architecture reviews to ensure secure-by-design products.

In this role, you will influence product strategy, manage emerging risks, and act as a security SME across IT Risk and Cyber domains, with global collaboration and regulatory support.