Embark on a transformative journey in technology risk management at an iconic financial firm. In this pivotal role, you'll strategize and implement innovative risk solutions, ensuring digital transformation aligns with regulatory compliance and the firm's objectives.
As a Tech Risk Engagement Director in Cybersecurity & Tech Controls, you will lead a geographically dispersed team across APAC, collaborating closely with control domain experts based in the region and the US. Your ability to interpret regulatory requests and align them to JPMC's internal controls standards and language will be key, as you identify and articulate how our tech and cyber controls align with regulatory expectations. This role also offers opportunities to leverage AI as an accelerator, enhancing the efficiency and effectiveness of regulatory engagements by working with other internal technology teams to set solution requirements.
Job responsibilities
- Spearhead the management of all cyber and technology-focused regulatory engagements across the APAC region, ensuring that JPMC's controls are effectively communicated and aligned with regulatory expectations.
- Develop and Execute Strategy: Formulate and implement a comprehensive strategy for regulatory engagement, collaborating with senior leaders to ensure alignment with the firm's overall risk management objectives.
- Interpret Regulatory Requests for Information: Analyze and interpret regulatory RFIs specific to APAC, translating them into JPMC's internal terminology and identifying and articualting corresponding technology and cyber controls.
- Collaborate with Stakeholders: Work closely with a wide range of stakeholders, including control domain experts, Product Owners, Business Control Managers, and regulators, to maintain a holistic view of the technology risk posture and its impact on the business.
- Balance Compliance and Security: Ensure that regulatory requirements are met while safeguarding sensitive information, balancing compliance obligations with internal security protocols to protect the firm from cybersecurity risks.
- Manage a Geographically Dispersed Team: Lead and motivate a team spread across the APAC region, fostering collaboration and ensuring that team members are aligned with the strategic goals of the regulatory engagement function.
Required qualifications, capabilities, and skills
- Bachelor’s Degree in Computer Science, Cybersecurity, Data Science, or related disciplines
- 7+ years of experience or equivalent expertise in technology risk management, information security, or a related field, with a focus on managing risk identification, assessment, and mitigation
- Demonstrated expertise in risk management frameworks, industry standards, and regulatory requirements relevant to the financial industry
- Proven ability to lead large teams, manage cross-functional projects, influence executive-level strategic decision-making, and effectively translate technology insights to business strategy in communications with senior executives
- Advanced knowledge and experience leading data security, risk assessment & reporting, and control evaluation, design, and governance, with a track record of implementing effective risk mitigation strategies
- Strong understanding of regulatory frameworks and requirements specific to the APAC region, with the ability to interpret and translate these into actionable strategies for JPMC.
- In-depth knowledge of cybersecurity principles and technology controls, with the ability to articulate how these align with regulatory expectations.
- Excellent communication skills to effectively convey complex regulatory and technical information to senior leaders and regulators, ensuring clarity and compliance.
- Proven ability to work collaboratively with geographically dispersed teams and control domain experts, fostering a cohesive approach to regulatory engagement