Compliance, Conduct and Operational Risk (CCOR), Resiliency - Vice President

JPMorgan Chase & Co.; Columbus (OH); On-site; USD 150,000 - 190,000; Full time

Job summary

JPMorgan Chase & Co. in the United States seeks a Business, Operational Resiliency Risk Manager - Vice President to design, implement, and govern controls and risk programs that support resilient operations across the region.

You will collaborate with business, control, and technology teams to ensure regulatory and internal standards are met and to foster a culture of resiliency. The role emphasizes identifying resiliency risks in technology, cyber, and third-party contexts, testing controls,

Qualifications

• Bachelor's degree in Information Security, Computer Science, or a related field.
• 8+ years of experience in technology risk, cyber resilience, third-party tech risk management, or business continuity within financial services or a regulated industry with APAC exposure.
• Strong knowledge of technology risk management frameworks, regulatory requirements, and industry standards (e.g., Basel, NIST, ISO 22301) including APAC regulations.

Responsibilities

• Drive identification, assessment, and management of resiliency risks across technology, cyber, and third-party risks with global/APAC stakeholders.
• Support design, execution, and evaluation of controls mitigating resiliency risks.
• Oversee risk identification for business and tech initiatives impacting resiliency in APAC.
• Monitor effectiveness of resiliency controls, identify gaps, and recommend enhancements.
• Provide SME oversight of technology resiliency testing activities, including scenario analysis and recovery drills.
• Participate in governance forums, providing oversight and credible challenge to resiliency risk management.

Skills

Information Security

Risk Management

APAC exposure

Python

Data analysis

Communication skills

Cross-functional teamwork

Education

Bachelor's degree in Information Security, Computer Science, or related field

Job description

In this role, you'll help shape our resiliency risk strategy, collaborate with diverse teams, and ensure robust compliance with regulatory and internal standards. You'll be part of a dynamic environment where your expertise in risk management and operational resiliency will help safeguard our business and clients. If you're passionate about driving operational excellence and building strong risk governance disciplines, this is the opportunity for you.

Job summary

As a Business, Operational Resiliency Risk Manager - Vice President in the Compliance and Operational Risk team, you will oversee the design, implementation, and ongoing management of controls and risk management frameworks that support our ability to respond to disruptive events. You will work closely with business, control, and technology stakeholders to ensure compliance with regulatory, legal, and internal standards, and foster a strong culture of resiliency and risk management across the region.

Job Responsibilities:

• Drive identification, assessment, and management of resiliency risks, including technology, cyber, and third-party risks, in collaboration with global and APAC stakeholders.
• Support and challenge the design, execution, and evaluation of controls mitigating resiliency risks.
• Oversee risk identification for business and technology initiatives impacting resiliency in APAC.
• Monitor and evaluate the effectiveness of resiliency controls, identify gaps, and recommend enhancements.
• Provide subject matter expertise and oversight of technology resiliency testing activities, including scenario analysis and recovery drills.
• Participate in governance forums, providing oversight and credible challenge to resiliency risk management.
• Maintain awareness of regulatory changes, emerging risks, and industry best practices, and incorporate them into risk assessments.
• Support responses to regulatory exams, inquiries, and internal audits.
• Build and maintain strong relationships with stakeholders across business, control, and technology teams. Facilitate cross-functional collaboration and drive alignment on resiliency objectives.
• Design and propose resiliency risk scenarios that can be evaluated using available data, supporting proactive risk management
• Support monitoring and testing activities, including independent control testing and validation.

Required Qualifications, Capabilities, and Skills:

• Bachelor's degree in Information Security, Computer Science, or a related field.
• Minimum 8 years of experience in technology risk, cyber resilience, third-party technology risk management, or business continuity planning within financial services or a regulated industry, with APAC exposure.
• Strong knowledge of technology risk management frameworks, regulatory requirements, and industry standards (e.g., Basel, NIST, ISO 22301), including APAC-specific regulations.
• Experience in control design, control testing, risk assessment, and issue management for technology and business resiliency. Strong expertise in technology resiliency frameworks, including chaos engineering, microservices resiliency patterns, and other modern approaches.
• Proven ability to analyze complex technology and resiliency issues, identify root causes, and develop effective mitigation strategies.
• Experience integrating resiliency controls into SDLC, enterprise architecture, and technology change management processes. Expertise in cloud-native, hybrid, and on-premises architectural patterns and secure architecture principles
• Excellent verbal and written communication skills, with the ability to influence and engage stakeholders at all levels.
• Demonstrated ability to work effectively in cross-functional teams and drive initiatives to completion in a complex, matrixed organization.
• Self-starter with the ability to work independently, frame complex problems clearly, and identify creative solutions.
• In-depth understanding of fault tolerance, disaster recovery, and high availability for both applications and infrastructure. Knowledge of Python and automation tools for analyzing large datasets and identifying risk patterns.

Preferred Qualifications, Capabilities, and Skills:

• Professional certifications such as ISO 22301, MBCI, CISM, CRISC, or equivalent.
• Proficiency in data analysis, automation tools, and dashboard/reporting solutions.
• Experience working in a global financial services organization.
• Familiarity with regulatory requirements and best practices for resiliency globally.
• Experience leading resiliency testing activities, such as scenario analysis and tabletop exercises.
• Ability to adapt communication and engagement strategies for diverse stakeholders.
• Experience supporting regulatory exams and internal audits.