Compliance Risk Management Lead

JP Morgan Chase; City of London; On-site; GBP 70,000 - 90,000; Full time

Job summary

A leading global bank is seeking a Compliance Risk Management Lead in London. This role involves performing regulatory assessments, advising on compliance matters, and managing technology-related risks. The ideal candidate will have extensive experience in risk management and technology compliance within the financial sector, showcasing strong analytical and organizational skills. This full-time position offers an opportunity to contribute to a dynamic team focused on cybersecurity regulations and compliance.

Qualifications

• Professional experience in risk management or compliance in technology fields.
• Strong technical experience in technology and cybersecurity within the financial services industry.
• Understanding of technology risk management and control principles.

Responsibilities

• Perform regulatory assessments related to technology compliance matters.
• Review regulations and work with divisional partners to develop policies.
• Support the review of significant events, including security events.

Skills

Risk management

Compliance

Technology-related experience

Cybersecurity knowledge

Data analysis

Tools

Agile

DevOps

NIST

ISO 27001

Alteryx

UiPath

Qlik Sense

Tableau

Job description

Compliance Risk Management Lead

Join to apply for the Compliance Risk Management Lead role at JPMorganChase.

Job Description

As a world leading bank, our culture is all about thinking outside the box, challenging the status quo and striving to be best‑in‑class. As a Compliance Risk Management Lead in our Technology & Cyber CCOR organisation you will materially contribute to the development of the Technology Compliance programme through your deep knowledge and experience of European and Global technology and cybersecurity laws, rules and regulations. You will work closely with the wider Technology & Cybersecurity CCOR team responsible for the design, implementation and oversight of the 2nd Line of Defence independent risk management programme for technology and cybersecurity risks and broaden initiatives at legal entity, regional and global level. You will also be part of local and firmwide community, and Diversity, Opportunity and Inclusion initiatives.

Job Responsibilities

• Perform regulatory assessments of technology compliance related matters, including resiliency, outsourcing, data loss prevention, AI and cloud technology related matters.
• Review regulations and impact assessments, and work with divisional partners to advise the relevant owners on the development of policies and procedures within the legal entity and across other group legal entities as necessary.
• Keep abreast of emerging technologies and related regulatory and legislative changes and provide advice to enable the business to implement applicable changes and operate in a compliant and controlled manner.
• Support the review of significant events (including security events) over a defined economic threshold, examining event and resolution, back‑testing against the firm’s risk management framework results, metrics, escalations, reporting, and scenarios.
• Perform ongoing monitoring to ensure the appropriate application of policies, standards and procedures by employing data analytics on critical systems of records to identify potential issues and areas of risk in a highly efficient manner.
• Provide independent assessments of the risks and controls related to the adoption of technologies, including Cloud and AI/ML.
• Participate in the assessment of emerging risks as part of strategic business risk reviews, analysis of regulatory and market developments, New Business Initiative Approvals, and review of external risk events.

Required Qualifications, Capabilities, And Skills

• Professional experience in risk management, compliance, or technology‑related fields.
• Strong technical experience in technology, cybersecurity, governance, operational risk or technology compliance within the financial services industry or experience in an equivalent role in the technology industry.
• Knowledge and experience with Information Security and Risk Management standards and frameworks such as NIST, ISO 27001/27002 and modern development practices and supporting toolsets (e.g., Agile, DevOps).
• Ability to understand complex technical systems and the business processes they support and synthesize the corresponding risks and controls and recommend adjustments if required.
• Understanding of technology risk management and control principles with a proven ability to anticipate and identify risks and effective mitigating actions.
• Strong organizational, project management, data analysis and modern data analytic techniques, multi‑tasking and stakeholder management skills with a demonstrated ability to manage expectations and deliver results with a high level of professionalism, self‑motivation, and integrity.

Preferred Qualifications, Capabilities, And Skills

• EMEA technology regulatory knowledge is preferred and an understanding of EU regulation (i.e., DORA, EU AI Act, NIS, etc.).
• Professional IT and Information Security certifications such as CISSP, CISA, CISM, CRISC, CGEIT as well as Cloud related certifications (e.g., CCSP, AWS Certified Practitioner) are beneficial.
• Knowledge of innovative and automation technologies and supporting toolsets such as Alteryx, UiPath, Qlik Sense, Tableau, etc.
• Experience of implementing innovative methods of overseeing risks using modern data‑driven and analytical techniques would be a key advantage.

Job Details

• Seniority Level: Not Applicable
• Employment Type: Full‑time
• Job Function: Finance and Sales

About Us

J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world’s most prominent corporations, governments, wealthy individuals and institutional investors. Our first‑class business in a first‑class way approach to serving clients drives everything we do. We strive to build trusted, long‑term partnerships to help our clients achieve their business objectives.

We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs.