APAC Data & AI Compliance and Operational Risk Management - Vice President

Aumni; Singapore; On-site; SGD 260,000 - 520,000; Full time

Job summary

J.P. Morgan is seeking an APAC Data & AI Compliance and Operational Risk Management Vice President within Compliance, Conduct and Operational Risk. You will provide independent oversight across AI, privacy, and data risk.

Lead monitoring and testing reviews end-to-end, translate regulatory requirements into clear obligations, and drive governance across the organization. You will partner with business, technology, legal, and data analytics teams to embed responsible practices into delivery and

Qualifications

• Bachelor’s degree and regulatory/compliance experience in a regulated industry.
• Independent risk or compliance reviews end-to-end with report writing.
• Experience supporting regulatory examinations or engagements related to privacy, data, technology risk, and/or AI.
• Ability to convert regulatory requirements into control standards and testing approaches.
• Familiarity with data governance concepts and AI/ML risk considerations.

Responsibilities

• Provide independent oversight and credible challenge of compliance with AI, privacy, and data risk requirements across Asia Pacific.
• Lead monitoring and testing reviews end-to-end, including scoping, evidence collection, testing, documentation, and remediation follow-up.
• Support regulatory engagements, drafting materials, briefing packs, and tracking commitments through closure.
• Conduct risk and control assessments, evaluating design and effectiveness and recommending enhancements.
• Review governance and controls for new AI and data initiatives, challenging artifacts' completeness and quality.
• Translate evolving regulatory expectations into clear obligations, control standards, testing approaches, and evidence requirements.
• Partner with business, technology, legal, and data analytics stakeholders to align interpretations and embed expectations into delivery.
• Drive issue identification and remediation governance, including root-cause analysis and milestone tracking.
• Produce clear management reporting on review results, trends, and risks; escalate issues through governance channels.
• Contribute to internal working groups and regulatory forums with concise summaries and analyses.

Skills

Regulatory risk management

AI risk management

Data governance

Test design

Evidence evaluation

Regulatory engagement

Stakeholder management

Communication

LLM risk concepts

Explainability basics

Education

Bachelor’s degree in Computer Science, Data Science, Information Systems, Data and Information Architecture, or related field

Tools

Python

R

Alteryx

Tableau

Excel

Job description

Help shape how responsible data and AI practices are embedded across a complex, fast-evolving regulatory landscape. You will play a visible, high-impact role influencing controls, evidence, and outcomes for AI, privacy, and data governance. Working across business, technology, legal, and data and analytics teams, you will turn regulatory expectations into practical oversight and clear actions. You will build deep domain expertise while helping teams deliver safer, more trusted solutions. If you like solving ambiguous problems with rigor and clarity, this role is for you.

As an APAC Data & AI Compliance and Operational Risk Management Vice President within Compliance, Conduct and Operational Risk, you provide independent oversight and credible challenge across AI, privacy, and data risk. You will lead monitoring and testing reviews end-to-end, assess risk and controls, and drive effective issue management. You will support regulatory engagement activities by translating requirements into clear obligations, control standards, and evidence expectations. You will partner closely with stakeholders to strengthen governance and embed responsible practices into delivery. You will produce decision-ready reporting that helps leaders understand risk themes, trends, and priorities.

Job responsibilities

• Provide independent oversight and credible challenge of compliance with applicable AI, privacy, and data risk requirements across Asia Pacific.
• Lead monitoring and testing reviews end-to-end, including scoping, walkthroughs, evidence collection, control testing, documentation, reporting, and remediation follow-up.
• Support regulatory engagements, including coordinating responses, drafting materials, preparing briefing packs, and tracking commitments through closure.
• Conduct risk and control assessments, evaluating control design and operating effectiveness and recommending practical enhancements.
• Review governance and controls for new and changing AI and data initiatives, challenging the completeness and quality of supporting artifacts.
• Translate evolving regulatory expectations into clear compliance obligations, control standards, testing approaches, and evidence requirements.
• Partner with business, technology, legal, and data and analytics stakeholders to align interpretations and embed expectations into delivery and control frameworks.
• Drive issue identification and remediation governance, including root-cause analysis support, action plan challenge, milestone tracking, and closure validation.
• Produce clear management reporting on review results, issues, trends, and emerging risks, escalating material concerns through appropriate governance channels.
• Contribute to internal working groups and, as needed, industry or regulatory forums through concise summaries, position notes, and technical/regulatory analyses for senior stakeholders..
• Stay ahead of emerging APAC regulatory themes in AI, privacy, and data governance; proactively assess impacts and propose targeted oversight priorities.

Required qualifications, capabilities, and skills

• Bachelor’s degree in Computer Science, Data Science, Information Systems, Data and Information Architecture, or a related field.
• 6 years of relevant experience in compliance, operational risk, technology risk, privacy, data governance, or AI risk management within financial services or another regulated industry.
• Demonstrated ability to independently deliver risk or compliance reviews end-to-end, including test approach design, evidence evaluation, conclusions, and high-quality written reporting.
• Experience supporting regulatory examinations or engagements related to privacy, data, technology risk, and/or AI.
• Ability to interpret regulatory requirements and convert them into control standards, testing approaches, and objective evidence expectations.
• Working knowledge of data governance practices and common capabilities such as data catalogs, data lineage, data quality controls, access controls, and retention.
• Working knowledge of artificial intelligence and machine learning (AI/ML), including generative AI and agentic AI concepts, key risks, and practical controls.
• Familiarity with large language model (LLM) risk concepts such as prompt patterns, evaluation approaches, and safety and guardrail practices.
• Familiarity with model explainability and fairness concepts and common approaches (for example, SHAP, LIME, or comparable techniques).
• Familiarity with privacy-enhancing techniques such as anonymization, differential privacy, and federated learning concepts.
• Strong stakeholder management and communication skills, with the ability to influence outcomes through clear, risk-based guidance without formal authority.

Preferred Qualifications, Capabilities, and Skills

• Experience operating within APAC in a second-line compliance/operational risk model.
• Hands-on experience performing thematic reviews and control testing across data/AI domains (e.g., lineage validation, access governance, bias testing protocols, explainability documentation, privacy impact assessments).
• Strong execution discipline with the ability to manage multiple priorities, stakeholders, and deadlines in parallel.
• Data analytics and visualization skills (e.g., Python, R, Alteryx, Tableau, Excel) to support monitoring, testing, and trend-based risk insights.
• Relevant certifications (e.g., CIPP/A, CIPM, CIPT, CDMP, risk/compliance qualifications) and/or formal AI governance coursework.
• Experience partnering with Model Risk, Technology Risk, Data Governance, and Cyber/Information Security teams in a complex, matrixed environment.

J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world’s most prominent corporations, governments, wealthy individuals and institutional investors. Our first-class business in a first-class way approach to serving clients drives everything we do. We strive to build trusted, long-term partnerships to help our clients achieve their business objectives.

We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.

Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we’re setting our businesses, clients, customers and employees up for success. Lead oversight that strengthens responsible AI, privacy, and data governance through clear controls and evidence.