Technology and Cybersecurity Policy & Partnerships – Tech Risk Engagement Lead

This is a tremendous opportunity to learn about high-priority initiatives and collaborate with colleagues throughout a world-class firm. Working at the intersection of public policy, regulation, technology, and cybersecurity, you'll sharpen your understanding of cyber risk management and strategy, while continuing to develop your leadership, management and communication skills. While the role requires a deep understanding of technology and cybersecurity regulatory and public policy, success hinges on teamwork and leadership and will require building relationships and leading partners and stakeholders across initiatives. Prior instances of applying this experience at a large financial institution would put you at a distinct advantage.

As a Tech Risk Engagement Manager in Cybersecurity & Tech Controls, you will play a leading role in developing, and advancing the firm's public policy positions across Asia Pacific, with particular responsibility for Hong Kong and Mainland China, developing trusted relationships with government authorities, regulators, industry bodies and other key policy stakeholders. You will support and drive the development of engagement strategies based on research and analysis of new government policies, regulations, industry initiatives, and emerging technology trends. You will also regularly meet with partners in industry and government to share ideas and advance the firm's interests..

Job responsibilities

• Support APAC Technology and Cybersecurity Policy and Partnerships team and global operating model  
• Develop strategies and plans to advance the firm’s policy priorities across jurisdictions in APAC; support the firm’s external engagement and thought leadership strategy in region. 
• Directly support the regional and country information security officers to ensure their awareness and understanding of key regulatory and public policy developments impacting the firm. 
• Monitor, assess and communicate impacts from regional developments to the firm’s global technology and cybersecurity strategies and clearly communicate that to central leadership.  
• Conduct analysis of relevant public and regulatory policy developments, as well as work such as industry initiatives and JPMC's supervisory engagements, to inform policy and advocacy development. 
• Collaborate with cross-functional partners in region such as Government Relations, Compliance, Legal, Chief Data and Analytics Office and the Third Party risk management team on priority policy issues 
• Represent JPMC in appropriate government consultations, industry associations, policy forums and public-private cybersecurity initiatives, and coordinate responses to relevant regulatory and policy proposals. 
• Uses enterprise-authorized AI capabilities within the work environment to accelerate synthesis of regulatory developments and draft risk/control reporting, validating outputs and handling data according to sensitivity and security requirements.
• Promotes reuse-first, AI-assisted approaches to streamline recurring policy/control framework maintenance and reporting routines, ensuring human review and alignment to auditability expectations.

Required qualifications, capabilities, and skills

• Bachelor’s Degree in any relevant area such as Computer Science, Cybersecurity, public policy or international relations
• 5+ years of working experience with a strong understanding of government policy making, financial regulations, technology and cybersecurity regulations, international relations, and national cyber security strategies  
• Proven track record of leading strategic policy programs and managing external stakeholders such as key regulators, industry associations, government officials and others 
• Superior analytical skills to enable accurate assessment of changes in the regulatory landscape and impact to the firm 
• Excellent written and verbal communication skills; ability to break down complex problems and articulate them clearly to a non-technical audience 
• Working knowledge of cybersecurity and emerging technology issues sufficient to translate between technical SMEs and policymakers 
• Results-oriented with a bias to action. Takes initiative to identify areas to add value and executes quickly and accurately 
• Demonstrated ability to develop meaningful relationships to achieve common goals across the firm 
• Strong ability to think strategically, prioritize issues and manage competing tasks  
• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support tech risk engagement workflows with strong validation habits and awareness of data sensitivity.
• Ability to review and validate AI-assisted risk summaries and recommendations before use, escalating when uncertain and ensuring outcomes align to security, auditability, and regulatory expectations.