Tech Cyber ORM

Location: Beijing, China

Job Responsibilities

Regulatory Intelligence & Advisory

• Monitor technology regulatory and legislative developments across China financial regulators and government agencies, including CSRC, NFRA, PBOC, SAFE, CAC, CBA, and Exchange centers.
• Support the China franchise Compliance team on technology regulatory and compliance matters.
• Support lines of business through new initiative and new product assessments.
• Build and maintain working relationships with lines of business, legal, data offices, and broader CCOR teams to enable cross-functional and cross-entity collaboration.

Risk Assessment & Independent Challenge

• Independently assess 1LOD technology risk management, controls, and governance through reviews and other activities against applicable laws, rules, and regulatory requirements for supported China entities.

Technology Incident Oversight

• Provide 2LOD guidance on technology incidents, including advice on reportability to China regulators (CSRC, NFRA, PBOC, SAFE).
• Maintain working knowledge of incident thresholds, regulatory definitions, and escalation protocols within the Chinese regulatory environment.

Innovation, Automation & Operational Scaling

• Use technology tools and AI-enabled automation to scale oversight and support continuous monitoring within the APAC CCOR Technology & Cyber function.
• Apply AI to support risk judgment and contribute to a more data-informed risk capability across the team.

 

Required Qualifications, Capabilities, and Skills

Education & Experience

• Bachelor's degree in Computer Science, Computer Engineering, Information Security, Business Information Systems, or a related field; or equivalent professional experience.
• Minimum 10 years of experience in Technology Risk, Cybersecurity, Compliance, IT Audit, and/or Operational Risk within financial services.
• Working knowledge of China-specific technology regulations, including CSRC, NFRA, PBOC, and SAFE IT requirements.

Technology & AI Fluency

• Ability to understand complex technical systems, the business processes they support, and the associated risks and controls.
• Familiarity with AI, large language models (LLMs), agentic AI, cloud computing, cybersecurity frameworks, and enterprise architectures.
• Familiarity with emerging regulatory requirements governing AI and algorithmic systems in financial services.

Data, Analytics & Emerging Risk

• Apply quantitative and qualitative analysis to identify trends, anomalies, and risk signals across complex datasets.
• Experience moving from sample-based review toward thematic analysis and continuous monitoring.
• Use automation and AI-assisted tools to scale oversight across the risk function.

Regulatory & Business Acumen

• Translate regulatory developments from CSRC, NFRA, PBOC, and SAFE into practical compliance implications.
• Strong organizational, project management, and stakeholder management skills, with a track record of delivering results with professionalism and integrity.

Behavioral Attributes

• Able to work across technology, business, legal, compliance, and ORM functions, adapting communication style to each audience.
• Focused on outcomes, not procedural compliance alone.
• Committed to continuous learning as technology and the risk landscape evolve.
• Track record of building effective relationships in complex, matrixed organizations.

Certifications (Beneficial)

• Relevant certifications include CISSP, CISA, CISM, CRISC, CCSP, or CGEIT.
• Cloud practitioner credentials (AWS, Azure, or equivalent) are also valued.

Language Requirements

• Bilingual fluency in English and Chinese (spoken and written) is required.

About Us

J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world’s most prominent corporations, governments, wealthy individuals and institutional investors. Our first-class business in a first-class way approach to serving clients drives everything we do. We strive to build trusted, long-term partnerships to help our clients achieve their business objectives.

About the Organization

Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we’re setting our businesses, clients, customers and employees up for success.We are hiring an experience tech cyber operational risk manager for our Asia Consulting to be based in Beijing.