Join our team to play a pivotal role in mitigating tech risks and upholding operational excellence, driving innovation in risk management.

As a Tech Risk & Controls Lead at JPMorgan Chase within the Cybersecurity Technology and Controls Controls, you will be responsible for designing and executing strategic program plans to enhance existing cyber and technology risk and control infrastructure, in-line with the firm’s standards.. you will lead efforts to improve the framework, guidance, and processes of GRC operations within Global Technology, ensuring the firm's complex technology operations are accurately represented and maintained within JPMC’s corporate operational risk environment (CORE) system. Your advanced knowledge of risk management principles, control practices, and operations will enable you to drive innovative solutions and effectively manage a diverse team in a dynamic and evolving risk landscape.

Job responsibilities

• Strategically plan and define deliverables and execution frameworks for cross-organizational risk and control programs.
• Collaborate with senior technology operations leaders and business control managers to ensure alignment of technology strategies, goals, and objectives.
• Design and implement the Technology Operational Risk framework, partnering with risk management teams to ensure technology risks are accurately captured in CORE for effective reporting, monitoring, and mitigation.
• Advise technology owners in Product, Engineering, and Operations on modeling processes, sub-processes, risks, and controls for comprehensive risk assessment.
• Establish and continuously enhance the use and integration of technology risk and controls reference data (such as risk scenarios, policies, standards, and procedures) within Firmwide and Global Technology Risk frameworks. Ensure assessment data and metrics are effectively incorporated into risk management decisions.
• Work with senior business control managers to align technology risk assessments with business operational risk assessments, ensuring actionable and meaningful outcomes.
• Partner closely with Operational Risk Management to optimize technology risk and control taxonomies, ensuring accurate and effective risk descriptions.
• Lead change initiatives across Global Technology GRC to strengthen understanding and management of technology risk.
• Develop and implement governance frameworks and reporting mechanisms to demonstrate the health and effectiveness of GRC operations.
• Drive innovation and provide analytical insights and thought leadership to enhance GRC processes and governance, improving end-to-end technology risk management.
• Communicate effectively, influence stakeholders, and manage relationships with senior and executive leaders across technology and business organizations.

Required qualifications, capabilities, and skills

• Formal training or certification on security concepts and 5+ years of applied experience.

• Good experience in regulatory, risk and/or control functions, with business management experience.

• Proven experience in delivering governance and oversight across business and risk disciplines.

• Familiarity with risk management frameworks, industry standards, and financial industry regulatory requirements.

• Proficient knowledge and expertise in cross-functional program management, align key stakeholders, influencing strategic outcomes using strong organization and communication skills.

• Demonstrated ability to influence executive-level strategic decision-making and translating program insights and value into actionable deliverables.

Preferred qualifications, capabilities, and skills

• Coordination and organizational skills.
• Executive level written and oral communications.
• Proven ability to think critically, solve complex problems.
• Strategic planning, business analysis and work force planning.