Lead Cybersecurity Architect

JPMorgan Chase & Co. • New York, NY

8d • $156,750 - $215,000

About The Position

As a Sr Lead Cybersecurity Architect within JPMorganChase’s Cybersecurity and Technology Controls organization, you will help develop high-quality cybersecurity solutions for software applications and platform products. The role applies deep technical expertise and problem-solving across multiple technology domains to address cybersecurity challenges and drive business impact. You will guide cybersecurity principles, processes, controls, and technology evaluations; provide expert technical direction; partner with stakeholders and senior business leaders; and promote firm-wide software development practices. The position also advances validated, reusable AI-assisted security analysis and validation in software development workflows, with attention to data sensitivity, resiliency, and auditability.

Requirements

• Formal training or certification in cybersecurity architecture concepts and at least 5 years of applied experience.
• Hands-on experience conducting threat modeling, attack-surface analysis, or security architecture assessments.
• Practical experience delivering enterprise-level cybersecurity solutions and controls.
• Demonstrated experience using enterprise-authorized AI capabilities for cybersecurity architecture workflows, with strong validation habits and awareness of data sensitivity.
• Ability to assess and validate AI-assisted security recommendations before adoption, escalate uncertainty, and ensure outcomes meet security, resiliency, and auditability expectations.
• Advanced expertise in one or more programming languages and/or applications, and advanced knowledge of cybersecurity architecture, applications, and technical processes in one or more technical disciplines, such as public cloud, AI/ML, or mobile.
• Ability to independently address design and functionality problems with little to no oversight.
• Ability to evaluate current and emerging technologies and select or recommend solutions for future-state architecture.
• Experience communicating complex security concepts effectively to senior business leaders and non-technical stakeholders.

Nice To Haves

• Experience securing enterprise cloud and software-as-a-service environments, including assessing architecture, data flows, identity, access, integrations, and security controls across third-party services.
• Security architecture experience across AWS, GCP, and Microsoft Azure, including understanding cloud-native security controls and shared responsibility models.
• Experience evaluating software-as-a-service integrations, APIs, OAuth applications, service principals, application identities, and machine-to-machine authentication from a security and risk perspective.
• Experience securing AI/ML and large language model-enabled applications, agents, and emerging AI capabilities, including risks involving data access, permissions, external integrations, and third-party model dependencies.
• Experience developing security control baselines, architecture standards, threat models, assessment frameworks, and reusable security patterns across cloud and software-as-a-service technologies.
• Familiarity with established security frameworks and methodologies such as NIST, MITRE ATT&CK, STRIDE, OWASP, and zero-trust principles.

Responsibilities

• Guide evaluations of current cybersecurity principles, processes, and controls, and lead evaluations of new technology against existing standards and frameworks; influence peers and decision-makers to adopt leading-edge solutions where appropriate.
• Use enterprise-authorized AI capabilities to accelerate cybersecurity risk analysis and control assessment, validating outputs and handling data according to sensitivity and security requirements.
• Provide technical guidance and direction to the business, technical teams, contractors, and vendors, serving as a function-wide subject matter expert in one or more areas.
• Partner with stakeholders and senior business leaders to recommend business modifications during periods of vulnerability.
• Contribute to the engineering community by advocating firm-wide software development lifecycle frameworks, tools, and practices.
• Drive reuse-first adoption of AI-assisted security validation in software development lifecycle and toolchain routines to improve control testing, remediation quality, traceability, and auditability in line with resiliency expectations.

Benefits

• Competitive total rewards package, including base salary determined by role, experience, skill set, and location.
• Eligible roles may receive commission-based pay and/or discretionary incentive compensation in cash and/or forfeitable equity.
• Comprehensive health care coverage.
• On-site health and wellness centers.
• Retirement savings plan.
• Backup childcare.
• Tuition reimbursement.
• Mental health support.
• Financial coaching.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed