Technology Risk and Controls Lead - Regulatory and Industry Risk Assessments

JPMorganChase; Singapore; On-site; SGD 150,000 - 210,000; Full time

Job summary

J.P. Morgan seeks a Regulatory Assessment Lead within its Technology Risk and Controls group in Singapore to guide assessments of the firm's technology control environment against regulatory requirements and industry standards.

You will lead cross-functional teams, mentor staff, partner with LOBs and auditors, and drive continuous improvement in compliance posture across APAC with a focus on CRI Profile, Swift CSP, HKMA CRAF and Japan CSSA.

Qualifications

• Bachelor's Degree in MIS, Cybersecurity or related disciplines.
• 5+ years of experience in technology risk management, information security or related field with focus on assessments in financial services.
• Experience leading regulatory assessments or technology audits in a large organization.
• Strong understanding of CRI Profile, ISO 27001 and related regulations including Swift CSP, CHAPS CRM, HKMA CRAF and Japan CSSA.

Responsibilities

• Lead end-to-end delivery of regulatory assessments ensuring the firm's technology control environment meets regulatory obligations and industry standards.
• Communicate issues and observations identified from assessments to stakeholders with root cause analysis and remediation recommendations.
• Provide SME in regulatory assessments to ensure compliance with regulations and industry standards such as CRI Profile, Swift CSP, CHAPS CRM, HKMA CRAF and Japan CSSA.
• Partner with LOBs, global risk and control functions, cybersecurity and technology teams to conduct control assessments aligned with firm policies and procedures.
• Build and maintain relationships with Location CISO, Regulatory Engagement, LOB technologists and Internal Audit to drive cross-functional collaboration.
• Collaborate with global teams to standardize assessment methodologies, tooling and reporting across regions.
• Mentor junior team members and foster a culture of excellence and regulatory awareness in APAC assessments.

Skills

Regulatory assessments

Technology risk management

Audit leadership

Regulatory frameworks

Stakeholder communication

Education

Bachelor's Degree in MIS / Cybersecurity

Job description

Job Description

We are seeking a Regulatory Assessment Lead with a deep background in audit, regulatory, and industry assessments to join our growing Technology Risk and Controls organization. As a Regulatory Assessment Lead in Cybersecurity and Technology Controls, you will evaluate the firm's technology control environment against applicable regulatory requirements and industry standards. You will translate complex regulatory obligations and provide subject matter expertise and technical guidance to technology-aligned process owners, ensuring that implemented controls comply with regulatory requirements and industry standards. This role serves as the primary assessment lead, interfacing with internal auditors, compliance and risk teams, technology stakeholders and business product teams to drive complex assessments. The role ensures the firm's continuous compliance with key regulatory and industry standards, including CRI Profile, Swift CSP, CHAPS CRM, HKMA CRAF, and Japan CSSA. The successful candidate will provide strategic direction and expert leadership in audit readiness and assessment practices, while driving continuous improvement in the firm's control posture. Strong knowledge of risk management principles and practices will enable you to deliver innovative solutions and lead a diverse team in a complex and evolving regulatory environment.

Job Responsibilities

• Lead end-to-end delivery and drive efficient and effective execution of assessments, ensuring the firm's technology control environment meets applicable regulatory obligations and industry standards.
• Communicate issues and observations identified from our assessments to relevant stakeholders, including root cause analysis and resolution recommendations.
• Provide subject matter expertise in regulatory assessments, ensuring that the organization adheres to applicable regulations and industry standards such as CRI Profile, Swift CSP, CHAPS CRM, HKMA CRAF and Japan CSSA.
• Partner with LOBs, global risk and control functions, cybersecurity and technology teams to conduct control assessments, ensuring compliance with regulatory requirements and alignment with the Firm's policies, standards and procedures.
• Build and sustain trusted relationships with Location CISO, Regulatory Engagement Management team, LOB technologists, CCOR (Compliance Conduct and Operational Risk), and Internal Audit to facilitate cross-functional collaboration and drive progress toward shared goals.
• Collaborate with global teams to ensure consistency of assessment methodologies, tooling, and reporting standards across regions.
• Manage and mentor junior team members, fostering a culture of excellence, continuous learning, and regulatory awareness within the APAC assessments practice.

Required Qualifications, Capabilities, And Skills

• Bachelor's Degree in Management Information Systems, Cybersecurity or related disciplines.
• 5+ years of experience or equivalent expertise in technology risk management, information security, technology audit or related field with a focus on assessments in the financial services industry.
• Demonstrated experience leading regulatory assessments, control evaluations, or technology audits in a large organization.
• Strong understanding of industry risk frameworks (CRI Profile, ISO 27001, etc.) and practical experience with regulatory and industry requirements, including Swift CSP, CHAPS CRM, HKMA CRAF and Japan CSSA.
• Proficient knowledge of control evaluation of technology risk domains including cybersecurity, data governance, IT resilience, third-party risk management and change management.
• Experience with payments environment and familiarity with payments-specific regulatory standards and cybersecurity control requirements.
• Strong analytical, problem-solving, and critical thinking skills, with the ability to manage multiple priorities and deliver high-quality outputs under tight deadlines.

Preferred Qualifications, Capabilities, And Skills

CISA, CISM, CRISC, CISSP, or similar industry-recognized risk and risk certifications are preferred.

About Us

J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world's most prominent corporations, governments, wealthy individuals and institutional investors. Our first-class business in a first-class way approach to serving clients drives everything we do. We strive to build trusted, long-term partnerships to help our clients achieve their business objectives. We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.

About The Team

Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we're setting our businesses, clients, customers and employees up for success.