Technology Operational Risk Vice President - GCP

JPMorganChase; City Of London; On-site; GBP 80,000 - 120,000; Full time

Job summary

A leading global financial services firm in London seeks a Technology Operational Risk Manager to oversee cybersecurity operational risks. The role requires expertise in cloud technologies and effective communication skills. Candidates should have a BS/BA in computer science and relevant experience in cybersecurity or engineering roles. This position promotes diversity and inclusion, aligning with the company's values.

Qualifications

• Relevant experience in cybersecurity or engineering roles.
• Deep understanding of cybersecurity technologies and associated risks.
• Excellent communication skills with clear writing.

Responsibilities

• Provide oversight of operational risks through assessments.
• Stay updated on technology trends and assess emerging risks.
• Engage with technology teams to understand control environments.

Skills

Cybersecurity

Cloud computing

Communication

Networking

Software development

Education

BS/BA degree in computer science or equivalent

Tools

Google Cloud Platform

Amazon Web Services

Job description

Join a dynamic team and be at the forefront of innovation, working with cutting-edge technologies to shape the future and drive transformative outcomes.

As a Technology Operational Risk Manager - Vice President within the CCOR Technology & Cybersecurity (CCOR Tech & Cyber) group, you will focus on providing independent oversight of technology and cybersecurity operational risk management practices across a Lines of Business (LOB). You will be responsible for reviewing and assessing the governance of risks, processes and controls, identifying risks inherent in JPMorgan Chase's technology environment, and ensuring that access to systems and data is appropriately managed and secured. This includes evaluating the effectiveness of frameworks, policies, and procedures, and ensuring that they align with industry best practices and regulatory requirements.

Job Responsibilities

• Perform oversight of operational risks through targeted assessments of global and regional technology/ cyber security processes for the Securities Services Technology organization.
• Participate in assessment of emerging risks as part of strategic business risk reviews, analysis of regulatory and market developments, New Business Initiative Approvals and review of external operational risk events.
• Stay abreast of current technology trends, vulnerabilities, and emerging technologies. Develop risk positions for new technologies, escalating and tracking risk items as necessary.
• Engage with technology teams to gain full understanding of the technology and control environment that support this business
• Understand third party risks as related to specific technology area of expertise.
• Work with appropriate technology areas to identify potentially elevated risk concentrations globally and perform assessments of the corresponding inherent risks and mitigating controls. Recommend any adjustments required to meet JPMC policy, regulatory requirements, and industry best practices.
• Participate in technology governance forums.
• Review significant events where technology is a factor and provide credible challenge.

Required qualifications, capabilities, and skills

• BS/BA degree in computer science or equivalent experience.
• Relevant experience in cybersecurity or engineering roles.
• Deep and broad understanding of cybersecurity and technologies, and associated risks.
• Deep knowledge of cloud computing, including hands-on experience with Google Cloud Platform and Amazon Web Services specifically.
• Subject matter expert in areas such as networking, identity management, access management, artificial intelligence, software development and cybersecurity.
• Excellent communication skills, experience preparing formal written documentation. Attention to detail, clear and concise writing, can translate complex technical information into understandable language for regulators.

Preferred qualifications, capabilities, and skills

• Professional cloud certifications such as AWS Certified Security Specialty and Google Professional Cloud Security Engineer.
• Knowledge of cloud infrastructure and hybrid implementations, experience with cloud security posture management and data security posture management tools.
• Ability to assess controls, identify vulnerabilities and access control weaknesses.
• Certified Ethical hacker.
• Software development experience and risks associated with the software supply chain.
• Professional Certifications in Cyber and Information Security Risk from ISACA or ISC2.

About Us

J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world's most prominent corporations, governments, wealthy individuals and institutional investors. Our first-class business in a first-class way approach to serving clients drives everything we do. We strive to build trusted, long-term partnerships to help our clients achieve their business objectives.

We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law.