Cyber security Risk Management Engineer

1 week ago

London, Greater London, United Kingdom Cyber Crime Full time
JPMorgan Chase & Co

(

NYSE:
JPM) is a leading Functional financial services firm with assets of $2 trillion and operations in more than 60 countries.

The firm is a leader in investment banking, financial services for consumers, small business and commercial banking, financial transaction processing, asset management, and private equity.

The Cybersecurity & Technology Controls (CTC) group at JPMorgan Chase aligns the firm's cybersecurity, access management, controls, and resiliency teams.

The group proactively and strategically partners with all lines of business and functions to enable them to design, adopt and integrate appropriate controls; and drive automation of controls.

This role is within the CTC Product Security team aligned to the Atlas Public Cloud platform within AWS.

As a Cloud Security Engineer, your primary responsibility will be to ensure that Public Cloud is adopted in a secure and compliant manner.

You will play an important role in identifying and managing risk related issues and actions with respective technology. You will have an eye for detail and an ability to see the big picture across security issues.

Support the execution and enhancement of a long-term information risk and control strategy designed to keep the information assets of the public cloud secure.


  • Deliver threat models and risk-based assessments of secure technology controls relating to cloud services, cloud platforms and architectural components.
  • Support business technology teams to understand firm control requirements and implementations across a broad range of cloud architectures.
  • Perform security reviews of infrastructure-as-code for cloud platform development.
  • Contribute to documentation and agile processes in support of security programs.
  • Interface with wider CTC teams ensuring platform integration with security operations, threat intelligence, IAM and network security.
Eagerness to collaborate in a team, and comfortable in both virtual and office environments.

  • Excellent verbal and written communication skills, including the ability to effectively participate in discussions and meetings with internal management, peer groups, regulators, and senior stakeholders.
  • Experience with threat modeling, discovery, vulnerability, and penetration testing
  • AWS, Azure, or Google Cloud certifications would be an advantage.
  • Understanding of DevOps or CI/CD concepts would be an advantage.

Morgan is a global leader in financial services, providing strategic advice and products to the world's most prominent corporations, governments, wealthy individuals and institutional investors.

Our first-class business in a first-class way approach to serving clients drives everything we do. We strive to build trusted, long-term partnerships to help our clients achieve their business objectives.

NYSE:
JPM) is a leading Functional financial services firm with assets of $2 trillion and operations in more than 60 countries.

The firm is a leader in investment banking, financial services for consumers, small business and commercial banking, financial transaction processing, asset management, and private equity.

The Cybersecurity & Technology Controls (CTC) group at JPMorgan Chase aligns the firm's cybersecurity, access management, controls, and resiliency teams.

This role is within the CTC Product Security team aligned to the Atlas Public Cloud platform within AWS.

As a Cloud Security Engineer, your primary responsibility will be to ensure that Public Cloud is adopted in a secure and compliant manner.

You will play an important role in identifying and managing risk related issues and actions with respective technology. You will have an eye for detail and an ability to see the big picture across security issues.

Support the execution and enhancement of a long-term information risk and control strategy designed to keep the information assets of the public cloud secure.


  • Deliver threat models and risk-based assessments of secure technology controls relating to cloud services, cloud platforms and architectural components.
  • Support business technology teams to understand firm control requirements and implementations across a broad range of cloud architectures.
  • Perform security reviews of infrastructure-as-code for cloud platform development.
  • Contribute to documentation and agile processes in support of security programs.
  • Interface with wider CTC teams ensuring platform integration with security operations, threat intelligence, IAM and network security.
Eagerness to collaborate in a team, and comfortable in both virtual and office environments.

  • Excellent verbal and written communication skills, including the ability to effectively participate in discussions and meetings with internal management, peer groups, regulators, and senior stakeholders.
  • Experience with threat modeling, discovery, vulnerability, and penetration testing
  • AWS, Azure, or Google Cloud certifications would be an advantage.
  • Understanding of DevOps or CI/CD concepts would be an advantage.

Morgan is a global leader in financial services, providing strategic advice and products to the world's most prominent corporations, governments, wealthy individuals and institutional investors.

Our first-class business in a first-class way approach to serving clients drives everything we do. We strive to build trusted, long-term partnerships to help our clients achieve their business objectives.
We are an equal opportunity employer and place a high value on diversity and inclusion at our company.

We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law.

We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs.

Visit ourFAQs for more information about requesting an accommodation. Explore more InfoSec / Cybersecurity career opportunities

Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.

#

  • Cyber Security Engineer

    1 week ago

    London, Greater London, United Kingdom BlueCrest Capital Management Full time

    Job Title: Cyber Security Engineer Location: London Department: Technology Infrastructure Permanent Department overview: Our Technology Infrastructure team operates globally and is responsible for every aspect of the firm's platforms. This ranges from our EUC/Office environments to Trading and Core service Co-Location Data Centres, and extends to...

  • Cyber Security Risk and Assurance Manager

    1 week ago

    London, Greater London, United Kingdom James Adams Group Full time

    10th May, 2024 Position Overview: We are seeking an experienced and dynamic Cyber Security Risk and Assurance Manager to join our clients team. In this role, you will be responsible for managing and enhancing our cyber security risk management and assurance program, ensuring that our organisation operates in a secure and compliant manner. The ideal...

  • Cyber Security Engineer

    1 week ago

    London, Greater London, United Kingdom Provide Full time

    Cyber Security Engineer, M&A, £635(inside) 10 months +Extension – SIEM, SOAR, IdAM, Vulnerability Management.Are you a Cyber Security Engineer and ready to take on a pivotal role in a global business? Working on a M&A, the largest in its sector. You will be joining the team as an Cyber SME to support the CISO, Project Manager and other SMEs to execute and...

  • Cyber Security Engineer

    1 week ago

    London, Greater London, United Kingdom Provide Full time

    Cyber Security Engineer, M&A, £635(inside) 10 months +Extension - SIEM, SOAR, IdAM, Vulnerability Management. Are you a Cyber Security Engineer and ready to take on a pivotal role in a global business? Working on a M&A, the largest in its sector. You will be joining the team as an Cyber SME to support the CISO, Project Manager and other SMEs to execute and...

  • Technical Security Advisor

    1 week ago

    London, Greater London, United Kingdom CornerStone - Risk, Cyber & Security Full time

    CornerStone is a leading independent Security Risk Consultancy, and we are now looking for a Technical Security Consultant to join our award-winning team in a UK-wide and Europe capacity. Personal and career development is really important to us, and you can expect our investment in you to include personalised development opportunities combined with a...

  • Cyber Security Engineer

    1 week ago

    London, Greater London, United Kingdom Provide Full time

    Job DescriptionCyber Security Engineer, M&A, £635(inside) 10 months +Extension – SIEM, SOAR, IdAM, Vulnerability Management, TrellixAre you a Cyber Security Engineer and ready to take on a pivotal role in a global business? Working on a M&A, the largest in its sector. You will be joining the team as an Cyber SME to support the CISO, Project Manager and...

  • Security Project Manager

    1 week ago

    London, Greater London, United Kingdom CornerStone - Risk, Cyber & Security Full time

    CornerStone is a leading independent Security Risk Consultancy, and we are now looking for a Security Project Manager with a security background and 5 years of experience to join our established award-winning team. We are seeking an individual who is looking to share their extensive skills and knowledge to support the team. This individual should enjoy...

  • Security Consultant

    1 week ago

    London, Greater London, United Kingdom Cyber Security Jobsite Full time

    Home Security Consultant - Policy Lead - Internation... Security Consultant - Policy Lead - International Travel Cyber Security Jobsite Posted today This advertiser has chosen not to accept applicants from your region. Full Job Description Location(s): UK, Europe & Africa : UK : London || UK, Europe &Africa : UK : Gloucester || UK, Europe & Africa...

  • Cyber Security Risk Hunter

    1 week ago

    London, Greater London, United Kingdom UBS Full time

    United Kingdom Information Technology (IT) Group FunctionsJob Reference #BRCity LondonJob Type Full TimeYour role Do you have a strong technical background? Do you have proven experience in Cyber and Information Security? Do you want to grow your skills in security data science? We're looking for a Cyber Security Risk Hunter to:be a power user of the firm's...

  • Cyber Risk and Security Analyst

    1 week ago

    London, Greater London, United Kingdom ubs Full time

    Information Technology (IT)Full TimeDo you have a strong technical cyber security background? Do you have proven experience in cyber risk governance?We're looking for a Cyber Security Risk Governance Specialist to:serve as a subject matter expert in a number of Cyber and Information Security (CIS) domains and capabilities, providing active risk oversight for...

  • Cyber Security Risk Analyst

    1 week ago

    London, Greater London, United Kingdom UBS Full time

    Your role Do you have a strong technical cyber security background? Do you have proven experience in cyber risk governance? We're looking for a Cyber Security Risk Governance Specialist to: serve as a subject matter expert in a number of Cyber and Information Security (CIS) domains and capabilities, providing active risk oversight for these areas ...

  • Cyber Security Manager

    1 week ago

    London, Greater London, United Kingdom ICBC Standard Bank Full time

    Summary The Information Technology Risk and Cyber Security team, which is part of the IT Department, supports over 100 different applications and a wide range of infrastructure operating systems and databases across London, NY and Asia and provides security support across the Bank. Job Purpose This London-based Cyber Security role is within the IT...

  • Cyber Security Engineer

    3 weeks ago

    London, Greater London, United Kingdom BAE Systems (Powersource) Full time

    Job Title: Principal Engineer - Cyber SecurityLocation: Frimley, Bristol, Weymouth, Portsmouth, Barrow or Brough. We offer a range of hybrid and flexible working arrangements - please speak to your recruiter about the options for this particular role. Salary: CompetitiveWhat you'll be doing: Building a risk based set of cyber security requirements for a...

  • Cyber Security Engineer

    1 month ago

    London, Greater London, United Kingdom BAE Systems (Powersource) Full time

    Job Title: Principal Engineer - Cyber SecurityLocation: Frimley, Bristol, Weymouth, Portsmouth, Barrow or Brough. We offer a range of hybrid and flexible working arrangements - please speak to your recruiter about the options for this particular role. Salary: CompetitiveWhat you'll be doing: Building a risk based set of cyber security requirements for a...

  • Windows Security Engineer

    1 week ago

    London, Greater London, United Kingdom Iceberg Cyber Security Full time

    Working in the financial industry is one of the most rewarding markets where a passionate technologist can develop into the elite when it comes to Cyber Security. I am representing an organisation that is known for having a high technical bar when hiring. They really look for problem solvers, engineers who can communicate and articulate well and are able to...

  • Cyber Engineer

    1 week ago

    London, Greater London, United Kingdom BlueCrest Capital Management Full time

    Job Title: Cyber Security Engineer Location: London Department: Technology Infrastructure Permanent Department overview:Our Technology Infrastructure team operates globally and is responsible for every aspect of the firm's platforms. This ranges from our EUC/Office environments to Trading and Core service Co-Location Data Centres, and extends to Public...

  • Cyber Risk and Security Analyst

    3 weeks ago

    London, Greater London, United Kingdom Marsh McLennan Full time

    R_ Cyber Risk and Security AnalystWe are seeking cyber-security professionals to join our London team and be our go-to subject matter experts on the technical aspects of cyber security. This is a partnership role, working directly with the Cyber Insurance Team.This is a new role so there is opportunity for the successful candidate(s) to shape the role...

  • Cyber Risk and Security Analyst

    1 month ago

    London, Greater London, United Kingdom Marsh McLennan Full time

    R_ Cyber Risk and Security AnalystWe are seeking cyber-security professionals to join our London team and be our go-to subject matter experts on the technical aspects of cyber security. This is a partnership role, working directly with the Cyber Insurance Team.This is a new role so there is opportunity for the successful candidate(s) to shape the role...

  • Cyber Security Senior Engineer

    1 week ago

    London, Greater London, United Kingdom Search Technology Full time

    Senior Cyber Security Engineer at Technology-driven Investment Management FirmOur client is looking for a skilled Senior Cyber Security Engineer to join their prestigious team based in London. In this key role, you will be responsible for protecting and improving the security of the company's valuable information assets. We need someone who has a solid grasp...

  • Cyber Security Associate

    1 week ago

    London, Greater London, United Kingdom Mizuho Full time

    We are recruiting for a Cyber Security AssociateProfile SummaryThe EIOD-IT Business Security Team has two key areas - Security Operations & Cyber Security Risk. This role reports to the Cyber Security Risk Team Leader, who reports to the Head of Business Security. The Cyber Security Risk function includes participation in relevant IT & business projects and...