Lead Cybersecurity Architect - Product Security jobs at Jpmorgan in United States, Chicago

Job summary:

As the Compliance Risk Management Lead in the Compliance team, you will be responsible for regulatory Compliance Coverage for JP Morgan India Pvt. Ltd.

Job responsibilities:

• Responsible for implementation of compliance framework for JPMIPL.
• Act as the Compliance Officer and Principal officer for JPMIPL.
• Responsible for regulatory guidance and advisory to the business/operations teams and other stakeholders regarding regulatory changes as well as existing regulations.
• Evaluate compliance with relevant regulations, including AML, KYC (impacting the regulatory licenses held by JPMIPL), monitor and identify issues or gaps.
• Provide updates to the board on regulatory developments
• Engage with SEBI, Exchanges and relevant regulatory authorities for exam/ inspection and other RFIs as well as for regulatory clarifications.
• Participate in various advocacy initiatives with SEBI and exchanges.
• Handle the escalation of alerts from Trade surveillance team as well as alerts from exchanges.
• Review policies pertaining to JPMIPL based on regulatory changes / requirements.
• Work with various regional teams and provide them with necessary updates regarding local regulations.
• Represent compliance on various legal entity governance forums

Required qualifications, capabilities, and skills:

• Bachelor’s Degree in Finance, Economics, Statistical Mathematics, Data Science or equivalent/related disciplines
• 10 plus years of experience in the Financial Services Industry with a demonstrated track-record experience and knowledge of Broking and Investment Banking compliance, including proficient understanding of India AML/CFT regulations and requirements

Preferred qualifications, capabilities, and skills:

• Chartered Accountant, Master’s degree, LLB, Company Secretary or other closely related professional qualification will be beneficial.
• Experience in handling regulatory investigations is an advantage

Competencies:

• Ability to develop and maintain productive relationships with key internal clients across all levels.
• A solution driven approach, with exemplary problem solving skills;
• Good analytical ability.
• Ability to own, deep-dive and/or investigate issues and can derive solutions independently, ultimately ensuring successful implementation or resolution
• Experienced with Mantas, technology driven case management tool and/or technology will be preferred and require proficiency in MS Office (Outlook, Excel, Word, PowerPoint etc.), and the experience to handle large volumes of quantitative data
• Ability to work effectively alone and as part of a team, at a local and regional level
• Strong interpersonal or client management skills required to work effectively, influence and/or negotiate desired outcomes with multiple stakeholders and/or senior management
• Good written and verbal communication skills.

Job responsibilities

• Advises and leads the cybersecurity strategy and development of multiple AI-enabled products, applications, and technologies across the CCB portfolio.
• Translates highly complex technical issues, trends, and approaches to leadership to drive the firm’s innovation and enable leaders to make strategic, well-informed decisions about target state architecture.
• Drives the adoption and implementation of new technical methods in cybersecurity in line with the latest product development methodologies.
• Creates durable, reusable cybersecurity frameworks that improve velocity and quality of output across teams and functions.
• Develops architectures that have applicability across businesses and functions.
• Champions the firm’s culture of diversity, opportunity, inclusion, and respect.

Required qualifications, capabilities, and skills

• Formaltraining or certification on cybersecurity architecture concepts and 10+ years applied experience
• Practical experience delivering cybersecurity architecture that can be applied and reused across businesses, functions, and systems.
• Fluent in one or more programming languages or applications.
• Demonstrated prior experience influencing across functions and teams to deliver modern cybersecurity architecture.
• Experience applying expertise and new methods to determine solutions for new and complex cybersecurity problems across various disciplines.
• Extensive practical cloud-native experience.
• Ability to evaluate current and emerging technologies to recommend the best technology solutions or approach to achieve the future state cybersecurity architecture.
  

Job responsibilities

• Leads multiple cybersecurity architecture and AI process implementations across departments to achieve firmwide architecture objectives
• Directly manages multiple areas with strategic transactional focus.
• Provides leadership and high-level direction to teams while frequently overseeing employee populations across multiple platforms, divisions, and lines of business.
• Acts as the primary interface with senior leaders, stakeholders, and executives to drive consensus across competing objectives.
• Manages multiple stakeholders, complex projects, and large cross-product collaborations.
• Develops the function’s objectives and is responsible for their outcomes.
• Champions the firm’s culture of diversity, opportunity, inclusion, and respect, and prioritizes diverse representation.

Required qualifications, capabilities, and skills

• Formaltraining or certification on cybersecurity architecture concepts and 10+ years applied experience
• Experience running teams of architects that design cybersecurity solutions operations on cloud-based platforms and applications.
• Experience designing cybersecurity products and solutions for public cloud-based applications and infrastructure.
• Experience developing and leading large, cross-functional teams of technologists.
• Demonstrated prior experience influencing across highly matrixed, complex organizations and delivering value at scale.
• Experience leading complex projects and supporting system design, testing, and operational stability.
• Experience hiring, developing, and recognizing talent.

Job Responsibilities:

• Develop software applications that serves as the primary way customers interact with our platform and its associated services
• Participate in and drive system design through the various phases of planning, review, refinement, and implementation
• Build strong collaborative relationships with technology peers, product owners, stakeholders, and external partners
• Plan, coordinate, and execute development of tactical and strategic roadmaps for test coordination and project delivery
• Demonstrate strong technical expertise and critical thinking; clearly communicate defect status, project risks, and progress updates to senior leadership
• Focus on continuous personal development, upskilling, and fostering an innovative culture

Required qualifications, capabilities, and skills

• Formal training or certification on software engineering concepts and 5+ years applied experience
• Hands-on experience with designing and implementing large scale distributed systems
• Advanced level experience in Core Java, Object Oriented Programming, and Spring
• Advanced knowledge of application, data, and infrastructure architecture, including design across systems and OOAD skills
• Ability to translate functional requirements into technical design and solutions
• Strong experience with Agile methodology, SDLC tools (JIRA, Jenkins, GIT, JUnit, Karate), and working in Agile teams
• Proficient in microservices frameworks (Spring Boot), REST, and programming/application development using Java and Spring Boot
• Knowledge of industry-wide technology trends, best practices, and process improvement opportunities

Preferred qualifications, capabilities, and skills

• Banking and payments domain background is a plus
• Experience with cloud and container-based development (AWS, Docker, Kubernetes, Kube) and orchestration

As a Tech Risk & Controls Lead in the Consumer & Community Banking (CCB) Business Information Security Officer (BISO) area, you will be responsible for identifying and mitigating compliance and operational risks in line with the firm's standards. You will also provide subject matter expertise and technical guidance to technology-aligned process owners, ensuring that implemented controls are operating effectively and in compliance with regulatory, legal, and industry standards. By partnering with various stakeholders, including Product Owners, Business Control Managers, and Regulators, you will contribute to the reporting of a comprehensive view of technology risk posture and its impact on the business. Your advanced knowledge of risk management principles, practices, and theories will enable you to drive innovative solutions and effectively manage a diverse team in a dynamic and evolving risk landscape.

Job responsibilities

• Ensure effective identification, quantification, communication, and management of technology risk, focusing on root cause analysis and resolution recommendations.
• Develop and maintain robust relationships, becoming a trusted partner with CCB BISO technologists, assessments teams, and data officers to facilitate cross-functional collaboration and progress toward shared goals.
• Execute reporting and governance of controls, policies, issue management, and measurements, offering senior management insights into control effectiveness and inform governance work.
• Proactively monitor and evaluate control effectiveness, identify gaps, and recommend enhancements to strengthen risk posture and regulatory compliance.

Required qualifications, capabilities, and skills

• 5+ years of experience or equivalent expertise in technology risk management, information security, or related field, emphasizing risk identification, assessment, and mitigation.
• Familiarity with risk management frameworks, industry standards, and financial industry regulatory requirements.
• Proficient knowledge and expertise in data security, risk assessment & reporting, control evaluation, design, and governance, with a proven record of implementing effective risk mitigation strategies.
• Demonstrated ability to influence executive-level strategic decision-making and translating technology insights into business strategies for senior executives.

Preferred qualifications, capabilities, and skills

• CISM, CRISC, CISSP, or similar industry-recognized risk and risk certifications are preferred.