Tech Risk and Controls, VP

Responsibilities

• Identify, quantify, and manage technology risks, focusing on root cause analysis and resolution recommendations
• Act as the primary point of contact for regulators on technology and cyber risk matters, including managing entity-specific risks and incident responses
• Develop and maintain robust relationships with LOB technologists, assessment teams, and data officers
• Execute reporting and governance for controls, policies, and issue management to provide senior management with insights into control effectiveness
• Proactively monitor KRIs, KPIs, and control effectiveness to identify gaps and recommend enhancements
• Coordinate China Regulator Reporting procedures for cyber incidents in coordination with the Cyber Security Operation Center
• Report cyber security risks to the Location Board, Location Operating Committee, and IT sub-committee of the board

Requirements

• 10+ years of experience in technology risk management, information security, or a related field
• Deep knowledge of China banking industry regulations, including NFRA, PBOC, SAFE, and MLPS
• Expertise in risk assessment, reporting, data security, and control evaluation/governance
• Familiarity with risk management frameworks and financial industry regulatory requirements
• Proven ability to influence executive-level strategic decision-making and translate technical insights for senior leadership

Preferred Qualifications

• Industry-recognized risk certifications such as CISM, CRISC, or CISSP

About the Company

J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world’s most prominent corporations, governments, wealthy individuals, and institutional investors. Our Commercial & Investment Bank is a global leader across banking, markets, securities services, and payments, serving clients in more than 100 countries.