Cybersecurity Architect

• Cultivate a security culture with our product technology and business colleagues by performing secure design reviews and threat modelling with application teams so they adopt our control products and build products that are secure by design
• Know our product across its breadth and depth, including our strategy, roadmap, and key investment programs
• Identify unfamiliar technology components, capabilities, and business concepts, and learn them proactively while applying critical thinking to identify hidden issues
• Learn from our peers in product and cybersecurity teams and share best practices in both directions
• Serve as the clear point of escalation and subject matter expert for Cybersecurity and Technology Controls within our product
• Partner and influence across our product supply chain
• Work collaboratively with product, technology, and business colleagues on business-as-usual audit and regulatory engagements, risk activities, and project initiatives
• Work closely with Third Party Oversight teams to ensure effective technology risk management of vendors engaged by technology partners, with a focus on cloud computing and emerging technologies

Technologies:

• AWS
• Architect
• Azure
• Cloud
• DevSecOps
• IaaS
• Support
• Kubernetes
• Marketing
• Network
• PaaS
• Security

More:

We are partnering directly with JPMorgan Chase to hire for this Lead Cybersecurity Architect role within Cybersecurity and Technology Controls, supporting Chase UK and JPMorgan Personal Investing. We are a global leader in financial services, providing strategic advice and products to prominent corporations, governments, wealthy individuals, and institutional investors. Our corporate functions team spans finance, risk, human resources, and marketing, and plays an essential role in setting our businesses, clients, customers, and employees up for success. We value diversity and inclusion, offer a first-class approach to serving clients, and support reasonable accommodations where needed.

• Advanced knowledge of cybersecurity architecture, applications, and technical processes with in-depth knowledge in one or more technical disciplines
• Ability to design and implement effective cybersecurity and technology controls
• Subject matter expert-level knowledge of Google Cloud Platform, Azure, and/or AWS, including how controls are applied to secure data and maintain availability
• Good knowledge of cloud services such as PaaS, IaaS, and SaaS, and Kubernetes solutions such as Anthos, AKS, and EKS
• Experience with cloud security posture management and cybersecurity vulnerability management
• Knowledge of security best practices and DevSecOps methodologies
• Good understanding of network security, network design, and firewalls
• Experience with authorization and authentication implementation and best practices
• Strong written and verbal communication skills