Regulatory Assessment Lead: Cybersecurity & Tech Controls

JPMorgan Chase; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

J.P. Morgan is seeking a Regulatory Assessment Lead to oversee regulatory and industry assessments within Technology Risk and Controls.

The role interfaces with internal auditors, compliance and risk teams, and technology stakeholders to ensure continuous regulatory compliance across APAC. The ideal candidate will bring extensive experience in technology risk management, audits, and a strong knowledge of CRI Profile, ISO 27001, and related standards.

Qualifications

• Bachelor’s degree in Management Information Systems, Cybersecurity or related disciplines.
• 5+ years in technology risk management, information security, or technology audit with assessment focus.
• Experience leading regulatory assessments and technology audits in large organizations.
• Strong understanding of CRI Profile, ISO 27001 and regulatory requirements.

Responsibilities

• Lead end-to-end delivery and drive assessment execution to meet regulatory obligations and industry standards.
• Communicate issues and observations from assessments with root cause analysis and recommendations.
• Provide SME in regulatory assessments and ensure compliance with regulations and standards.
• Collaborate with LOBs, risk functions, and technology teams to conduct control assessments and align with firm policies.
• Build relationships with Location CISO, Regulatory Engagement Management, and Internal Audit to enable collaboration.
• Standardize assessment methodologies, tooling, and reporting across regions.
• Mentor junior team members to foster excellence and regulatory awareness in APAC.

Skills

Regulatory assessments

Technology risk

Cybersecurity

Audit leadership

Regulatory frameworks

Data governance

Risk management

Analytical thinking

Education

Bachelor’s degree in MIS/CS/security

Job description

J.P. Morgan is seeking a Regulatory Assessment Lead to oversee regulatory and industry assessments within Technology Risk and Controls.

The role interfaces with internal auditors, compliance and risk teams, and technology stakeholders to ensure continuous regulatory compliance across APAC. The ideal candidate will bring extensive experience in technology risk management, audits, and a strong knowledge of CRI Profile, ISO 27001, and related standards.