Job Responsibilities

Regulatory Intelligence & Advisory

• Monitor technology regulatory and legislative developments across NFRA, PBOC, SAFE, CAC, CBA, CFETS, and SGE.
• Support China LIB Compliance on technology regulatory and compliance matters.
• Own and coordinate RFI responses within the Technology & Cyber domain.

Risk Assessment & Independent Challenge

• Independently assess 1LOD technology risk management, controls, and governance through participation in new product rollouts, new business initiatives, and new product assessments.
• Perform targeted reviews of technology processes and controls against applicable laws, rules, and regulatory requirements.

Technology Incident Oversight

• Provide 2LOD guidance on technology incidents, including advice on reportability to China regulators.
• Maintain working knowledge of incident thresholds, regulatory definitions, and escalation protocols within the Chinese regulatory environment.

Innovation, Automation & Operational Scaling

• Use technology tools and AI-enabled automation to scale oversight and support continuous monitoring within the APAC CCOR Technology & Cyber function.
• Apply AI to support risk judgment and contribute to a more data-informed risk capability across the team.

Required Qualifications, Capabilities, and Skills

Education & Experience

• Bachelor's degree in Computer Science, Computer Engineering, Information Security, Business Information Systems, or a related field; or equivalent professional experience.
• Minimum 8 years of experience in Technology Risk, Cybersecurity, Compliance, IT Audit, and/or Operational Risk within financial services.
• Working knowledge of China-specific technology regulations, including NFRA, PBOC, and SAFE IT requirements.

Technology & AI Fluency

• Ability to understand complex technical systems, the business processes they support, and the associated risks and controls.
• Familiarity with AI, large language models (LLMs), agentic AI, cloud computing, cybersecurity frameworks, and enterprise architectures.
• Familiarity with emerging regulatory requirements governing AI and algorithmic systems in financial services.

Data, Analytics & Emerging Risk

• Apply quantitative and qualitative analysis to identify trends, anomalies, and risk signals across complex datasets.
• Experience moving from sample-based review toward thematic analysis and continuous monitoring.
• Use automation and AI-assisted tools to scale oversight across the risk function.

Regulatory & Business Acumen

• Translate regulatory developments from NFRA, PBOC, SAFE, CAC, and CFETS into practical compliance implications.
• Clear verbal and written communication skills, with the ability to engage effectively across internal stakeholders and regulatory counterparts.
• Strong organizational, project management, and stakeholder management skills, with a track record of delivering results with professionalism and integrity.

Behavioral Attributes

• Able to work across technology, business, legal, compliance, and operational domains, adapting communication style to each audience.
• Focused on outcomes, not procedural compliance alone.
• Committed to continuous learning as technology and the risk landscape evolve.
• Track record of building effective relationships in complex, matrixed organizations.

Certifications (Beneficial)

• Relevant certifications include CISSP, CISA, CISM, CRISC, CCSP, or CGEIT.
• Cloud practitioner credentials (AWS, Azure, or equivalent) are also valued.

Language Requirements

• Bilingual fluency in English and Chinese (spoken and written) is required.

J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world’s most prominent corporations, governments, wealthy individuals and institutional investors. Our first-class business in a first-class way approach to serving clients drives everything we do. We strive to build trusted, long-term partnerships to help our clients achieve their business objectives.
We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.