Sr Lead Cybersecurity Architect

JPMorgan Chase & Co. • Jersey City, NJ

11d • $175,750 - $260,000

About The Position

As a Senior Lead Cybersecurity Architect in JPMorganChase’s Cybersecurity and Technology Controls line of business, you will develop high-quality cybersecurity solutions for software applications and platform products. You will apply deep technical expertise and problem-solving skills to cybersecurity challenges across multiple technology domains, with a particular focus on enterprise Collaboration & Communication technologies, including cloud platforms, SaaS services, Microsoft 365, technology integrations, and AI-enabled capabilities. You will partner with engineering, product, architecture, risk, and business teams to identify cybersecurity risks, perform threat modeling, assess control effectiveness, and develop practical mitigation strategies that enable secure adoption of modern technologies. The role also includes applying enterprise-authorized AI capabilities to support risk analysis and security validation, while validating outputs and following data-sensitivity, security, resiliency, and auditability requirements.

Requirements

• Formal training or certification in cybersecurity architecture and at least 5 years of applied experience.
• Hands-on practical experience delivering enterprise-level cybersecurity solutions and controls.
• Demonstrated experience using enterprise-authorized AI capabilities in the work environment to support cybersecurity architecture workflows, with strong validation habits and awareness of data sensitivity.
• Ability to assess and validate AI-assisted security recommendations before adoption, escalate uncertainty, and ensure outcomes meet security, resiliency, and auditability expectations.
• Advanced expertise in one or more programming languages and/or applications, and advanced knowledge of cybersecurity architecture, applications, and technical processes in one or more technical disciplines.
• Ability to independently address design and functionality problems with little to no oversight.
• Ability to evaluate current and emerging technologies and select or recommend solutions for future-state architecture.
• Hands-on experience conducting threat modeling, attack-surface analysis, and security architecture assessments.
• Demonstrated ability to identify threats, control gaps, cybersecurity risks, and appropriate mitigation strategies.
• Strong understanding of modern cloud security, including identity and access management, authentication and authorization, application and API security, data protection, logging and monitoring, and trust boundaries.
• Ability to interpret architecture diagrams and data flows, evaluate security controls, and communicate technical risks and recommendations to engineering, product, risk, and leadership stakeholders.

Nice To Haves

• Experience securing enterprise cloud and SaaS environments, including assessing architecture, data flows, identity, access, integrations, and security controls across third-party services.
• Security architecture experience across AWS, GCP, and Microsoft Azure, including understanding cloud-native security controls and shared responsibility models.
• Experience assessing SaaS integrations, APIs, OAuth applications, service principals, application identities, and machine-to-machine authentication from a security and risk perspective.
• Experience with Microsoft 365 security architecture, including Exchange Online, Microsoft Teams, SharePoint Online, OneDrive, Microsoft Entra ID, Microsoft Graph, Microsoft Purview, Microsoft Defender, and Microsoft Copilot.
• Experience securing AI/ML and LLM-enabled applications, agents, and emerging AI capabilities, including risks involving data access, permissions, external integrations, and third-party model dependencies.
• Experience developing security control baselines, architecture standards, threat models, assessment frameworks, and reusable security patterns across cloud and SaaS technologies.
• Familiarity with security frameworks and methodologies such as NIST, MITRE ATT&CK, STRIDE, OWASP, and zero-trust principles.

Responsibilities

• Guide evaluation of current cybersecurity principles, processes, and controls, and lead evaluation of new technology using existing standards and frameworks; influence peers and decision-makers to adopt leading-edge solutions where appropriate.
• Use enterprise-authorized AI capabilities to accelerate cybersecurity risk analysis and control assessment, validating outputs and handling data according to sensitivity and security requirements.
• Provide technical guidance and direction to the business, technical teams, contractors, and vendors, serving as a function-wide subject matter expert in one or more areas.
• Work with stakeholders and senior business leaders to recommend business modifications during periods of vulnerability.
• Contribute to the engineering community by advocating firm-wide frameworks, tools, and Software Development Life Cycle practices.
• Drive reuse-first adoption of AI-assisted security validation within SDLC and toolchain routines to improve control testing, remediation quality, and traceability/auditability in line with resiliency expectations.
• Lead cybersecurity architecture and design reviews for cloud platforms, SaaS solutions, Microsoft 365, AI-enabled services, and strategic technology integrations.
• Conduct threat modeling, attack-surface analysis, and security architecture reviews to identify threats, attack paths, control gaps, and cybersecurity risks.
• Evaluate risks associated with third-party integrations, APIs, application permissions, authentication patterns, data flows, external connectivity, and trust boundaries.
• Assess existing security controls and develop practical mitigation strategies or compensating controls for threats that are not sufficiently mitigated.
• Partner with engineering and product teams to turn security findings into actionable remediation plans and drive issues toward resolution.

Benefits

• Comprehensive health care coverage
• On-site health and wellness centers
• Retirement savings plan
• Backup childcare
• Tuition reimbursement
• Mental health support
• Financial coaching
• Competitive total rewards package, with base salary determined by role, experience, skill set, and location
• Eligible roles may receive commission-based pay and/or discretionary incentive compensation in cash and/or forfeitable equity

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed