JPMorgan Chase Compliance / Risk Analyst Interview Questions

1.Tell me about a time a compliance requirement or internal policy was creating real friction for a client — and you pushed to change or work around it. What did you do?

2.Walk me through a time you caught a control failure or process breakdown before it became a regulatory or audit issue. How did you find it, and what did you do next?

3.Tell me about a colleague who was struggling to keep up — maybe with a new regulation, a heavy workload, or a process they hadn't mastered. What did you actually do to help?

4.Describe a time you gave a peer or a junior analyst feedback that was hard to hear but genuinely improved their work. What did you say, and what changed?

5.Tell me about a time you identified that a compliance or risk decision the firm was making was actually creating more exposure for clients than it was removing. How did you make the case to change it?

6.Walk me through a time you were responsible for a regulatory reporting failure or a significant control breakdown — one with real stakes. How did you manage the response, and what did you change afterward?

7.Estimate how many Suspicious Activity Reports JPMorgan Chase's retail banking division likely files in a year. Walk me through your assumptions.

8.Your compliance team's quarterly MIS report shows a 40% spike in overdue KYC renewals for commercial banking clients. No one flagged this to you — you found it yourself. Where do you start?

9.JPMorgan Payments is onboarding a fintech partner that will white-label ACH and wire capabilities to their small business customers. Walk me through how you'd size the incremental compliance risk this partnership adds to the firm.

10.Across Chase's 80 million retail customers, estimate what percentage are likely to trigger at least one transaction monitoring alert in a given year — and what does that imply for the staffing math on your AML investigations team?

11.JPMorgan Chase is preparing to launch a digital asset custody service for institutional clients through Onyx. You've been asked to do a regulatory gap analysis. What frameworks apply, and where do you see the biggest open questions?

12.You're running a model risk compliance review for a credit decisioning model that Chase uses to approve or decline small business loan applications. The model team tells you the model performs well on aggregate metrics but you notice it was validated exclusively on data from 2018–2021. What are the compliance and risk flags, and how do you proceed?

13.Walk me through how you'd conduct a KYC periodic review for a high-risk corporate client — what sources do you pull, and what triggers an escalation?

14.How do you calculate residual risk on an internal control, and how do you use that number to prioritize your remediation backlog?

15.You're conducting a compliance risk assessment for a new feature on Chase Mobile — say, a peer-to-peer payment capability. How do you structure the assessment, and which regulatory frameworks are you pulling in?

16.Your transaction monitoring system generates 500 alerts a week — your team can meaningfully investigate 150. Walk me through how you design a prioritization and triage framework, and how you defend that methodology to your regulator.

17.JPMorgan Chase is deploying LLM Suite to 200,000 employees. As the compliance analyst assigned to the AI governance review, what are the top three risks you'd flag, and what controls would you put around them?

18.A front-office trader on J.P. Morgan Markets comes to you and argues that a new surveillance alert rule is generating so many false positives that it's materially impacting their ability to execute client orders. They want it disabled. How do you handle it?

19.You're reviewing a routine vendor due diligence file and notice the third-party processes payment data for JPMorgan Payments clients, but their last SOC 2 report is 18 months old and one control was marked 'exception noted.' What do you do?

20.You're halfway through a compliance review when you discover the business line already soft-launched the product two weeks ago — they were supposed to wait for sign-off. How do you handle it from here?

21.A Chase Mobile product manager tells you their fraud team is proposing to block all P2P transactions over $500 to high-risk geographies — no exceptions. Legal is fine with it, but you're worried about customer impact and potential fair lending concerns. What's your move?

22.You're six weeks into building a compliance risk assessment for a new business unit and your data source — the unit's transaction logs — turns out to be inconsistently formatted and missing three months of records. Your deliverable is due in two weeks. What do you do?

23.A senior relationship manager on the commercial banking side tells you off the record that one of their clients — a mid-size corporate account — is almost certainly structuring cash deposits to stay below BSA reporting thresholds, but they don't want you to file a SAR because it would kill a $2M fee deal closing next quarter. How do you handle this?

24.You've just been handed ownership of a consent order remediation workstream — the OCC exam team is back in 90 days and the prior analyst left three weeks ago with no handoff documentation. Two of the five committed milestones are already past due. What do you do in the first 72 hours?

25.Tell me about a time you had to get a business line or sales team to change how they were doing something because of a compliance concern — without having any direct authority over them. How did you make it happen?

26.Describe a time you presented a compliance finding or risk assessment to a senior leader and they pushed back hard — either dismissing the risk or pressuring you to soften the conclusion. What did you do?

27.Tell me about a time two stakeholders you depended on — say, legal and a product team, or two business lines — had directly contradictory views on whether something was permissible, and you were the one in the middle. How did you resolve it?

28.You've completed a risk assessment and your conclusion is that the firm needs to exit a product or customer segment — but the business line owns a meaningful revenue number tied to it. How do you build and deliver that case?

29.Tell me about a time a key stakeholder — an auditor, a regulator, or a senior business partner — lost confidence in your team's work. Maybe the data was wrong, a deadline slipped, or a finding was contradicted later. How did you rebuild the relationship?

30.You're the compliance lead on a multi-month project and three weeks before the finish line, your primary business partner — the one who owns the data, the decisions, and the executive relationship — tells you they're being pulled onto a higher-priority initiative and is replaced by someone new who disagrees with the direction you've taken. What do you do?