Executive Director - Technology Risk & Controls (IAM)

JPMorganChase•Plano, TX

About The Position

Join JPMorganChase's Identity & Access Management (IAM) organization as an Executive Director within Technology Risk & Controls. This leadership role is responsible for advancing technology risk management, control effectiveness, audit readiness, and continuous control monitoring across a critical portfolio supporting the firm's security and identity capabilities. The successful candidate will lead strategic initiatives focused on strengthening the design, execution, and sustainability of technology controls while driving modernization efforts across risk, governance, and audit processes. This role requires strong expertise in artificial intelligence (AI), data management, audit response modernization, and continuous control management to support the firm's evolving risk landscape and regulatory expectations.

Requirements

7+ years of experience in technology risk management, cybersecurity, or a related field, focusing on regulatory compliance and risk mitigation (NAMR/APAC – India/ LATAM/Hong Kong)
Demonstrated experience leading safe adoption of enterprise-authorized AI capabilities within the work environment within technology risk and controls workflows, including validation practices and awareness of data sensitivity.
Ability to define review/approval and escalation expectations for AI-assisted recommendations while maintaining security, auditability, and regulatory compliance outcomes.
Significant experience in technology risk management, controls, audit, cybersecurity, identity and access management, or related disciplines.
Demonstrated success leading large-scale risk and control transformation initiatives.
Experience working with internal audit, external audit, regulatory examinations, and remediation programs.
Strong understanding of technology control frameworks, governance practices, and control monitoring techniques.
Experience applying data management, analytics, automation, and AI capabilities to improve risk and control outcomes.
Exceptional executive communication and stakeholder management skills.
Proven ability to influence senior leaders and drive cross-functional execution.

Nice To Haves

Experience in Identity & Access Management (IAM), Privileged Access Management (PAM), cybersecurity controls, or enterprise technology governance.
Experience developing continuous control monitoring, metrics, telemetry, and risk reporting capabilities.
Knowledge of AI governance, data governance, and emerging technology risk management practices.
Experience leading regulatory, SOX, SOC, or enterprise control programs.

Responsibilities

Lead the development and execution of technology risk and control strategies across IAM.
Drive continuous improvement of control effectiveness, control coverage, and risk transparency.
Sets reuse-first expectations for enterprise-authorized AI adoption within the work environment across technology risk and controls operations to accelerate evidence synthesis, issue analysis, and executive reporting, with human-in-the-loop validation and appropriate handling of sensitive data.
Modernize audit and regulatory response processes through automation, data-driven insights, and AI-enabled capabilities.
Establish and enhance continuous control monitoring frameworks to improve risk identification, reporting, and remediation.
Partner with technology, cybersecurity, product, operations, compliance, audit, and control organizations to strengthen governance and control outcomes.
Leverage data management and analytical capabilities to improve control measurement, reporting, and decision-making.
Provide executive-level reporting and risk insights to senior technology and business leadership.
Support strategic initiatives involving AI governance, operational resilience, risk management, and regulatory readiness.
Lead and develop a high-performing team of risk, control, and governance professionals.
Establishes governance standards for AI-assisted workflows used in risk reporting and issue/action-plan management, ensuring traceability/auditability and alignment to security, resiliency, and regulatory expectations.