Technology Risk and Controls Lead (Cybersecurity Governance)

Join us to make a meaningful impact on how we manage technology risks and uphold operational excellence. You’ll have the opportunity to drive innovation in risk management while collaborating with talented professionals across the organization. At JPMorganChase, we empower you to shape the future of cybersecurity and technology controls. Your expertise will help us stay ahead in a dynamic risk landscape. Together, we’ll create a safer, more resilient environment for our business and clients. As a Tech Risk and Controls Lead in our Cybersecurity and Technology Controls team, you will identify and mitigate compliance and operational risks in line with our firm’s standards. You will provide subject matter expertise and technical guidance to technology-aligned process owners, ensuring controls operate effectively and comply with regulatory, legal, and industry standards. By partnering with Product Owners, Business Control Managers, and regulators, you will help report on our technology risk posture and its business impact. Your advanced knowledge of risk management will enable you to drive innovative solutions and lead a diverse team in an evolving environment.

Identify, quantify, communicate, and manage technology risk, focusing on root-cause analysis and actionable recommendations. Build and maintain strong relationships with technologists, assessment teams, and data officers to foster cross-functional collaboration. Execute reporting and governance of controls, policies, issue management, and measurements to inform senior management and governance activities. Monitor and evaluate control effectiveness, identify gaps, and recommend enhancements to strengthen risk posture and regulatory compliance. Assess regulatory changes related to cybersecurity and technology and evaluate their impact on the firm. Required Qualifications, Capabilities, and Skills: Expertise in technology risk management, information security, or related field, with emphasis on risk identification, assessment, and mitigation. Familiarity with risk management frameworks, industry standards, and financial industry regulatory requirements, such as the Digital Operational Resilience Act (DORA). Proficient knowledge in data security, risk assessment and reporting, control evaluation, design, and governance, with a record of implementing effective risk mitigation strategies. Ability to influence executive-level strategic decision-making and translate technology insights into business strategies for senior executives. Preferred Qualifications, Capabilities, and Skills: CISM, CRISC, CISSP, or similar industry-recognized risk certifications. If you’re ready to help us shape the future of technology risk management and be part of a collaborative, forward-thinking team, we encourage you to apply.