Sr Lead Cybersecurity Architect

JPMorganChase•Jersey City, NJ

11d

About The Position

As a Senior Lead Cybersecurity Architect within JPMorganChase’s Cybersecurity and Technology Controls line of business, you will help develop high-quality cybersecurity solutions for software applications and platform products. The role focuses on securing enterprise collaboration and communication technologies, including cloud platforms, SaaS services, Microsoft 365, technology integrations, and AI-enabled capabilities. You will partner with engineering, product, architecture, risk, and business teams to identify cybersecurity risks, conduct threat modeling, assess control effectiveness, and develop practical mitigation strategies that support secure adoption of modern technologies. The role provides technical leadership and guidance across cybersecurity architecture and design reviews, risk analysis, and control assessment. It also supports responsible use of enterprise-authorized AI in cybersecurity workflows, with validation of AI-assisted outputs and attention to data sensitivity, security, resiliency, and auditability.

Requirements

Formal training or certification in cybersecurity architecture and at least 5 years of applied experience.
Hands-on practical experience delivering enterprise-level cybersecurity solutions and controls.
Demonstrated experience using enterprise-authorized AI capabilities in the work environment for cybersecurity architecture workflows, with strong validation habits and awareness of data sensitivity.
Ability to assess and validate AI-assisted security recommendations before adoption, escalate uncertainty, and ensure outcomes meet security, resiliency, and auditability expectations.
Advanced expertise in one or more programming languages and/or applications, and advanced knowledge of cybersecurity architecture, applications, and technical processes in one or more disciplines, such as public cloud, AI/ML, or mobile.
Ability to independently address design and functionality problems with little to no oversight.
Ability to evaluate current and emerging technologies and recommend solutions for future-state architecture.
Hands-on experience conducting threat modeling, attack-surface analysis, and security architecture assessments.
Demonstrated ability to identify threats, control gaps, cybersecurity risks, and appropriate mitigation strategies.
Strong understanding of modern cloud security concepts, including identity and access management, authentication and authorization, application and API security, data protection, logging and monitoring, and trust boundaries.
Ability to interpret architecture diagrams and data flows, evaluate security controls, and communicate technical risks and recommendations to engineering, product, risk, and leadership stakeholders.

Nice To Haves

Experience securing enterprise cloud and SaaS environments, including assessing architecture, data flows, identity, access, integrations, and security controls across third-party services.
Security architecture experience across AWS, GCP, and Microsoft Azure, including understanding cloud-native security controls and shared responsibility models.
Experience evaluating SaaS integrations, APIs, OAuth applications, service principals, application identities, and machine-to-machine authentication from a security and risk perspective.
Experience with Microsoft 365 security architecture, including Exchange Online, Microsoft Teams, SharePoint Online, OneDrive, Microsoft Entra ID, Microsoft Graph, Microsoft Purview, Microsoft Defender, and Microsoft Copilot.
Experience securing AI/ML and LLM-enabled applications, agents, and emerging AI capabilities, including risks involving data access, permissions, external integrations, and third-party model dependencies.
Experience developing security control baselines, architecture standards, threat models, assessment frameworks, and reusable security patterns across cloud and SaaS technologies.
Familiarity with security frameworks and methodologies such as NIST, MITRE ATT&CK, STRIDE, OWASP, and zero-trust principles.

Responsibilities

Guide evaluation of cybersecurity principles, processes, and controls, and lead evaluation of new technologies using existing standards and frameworks.
Use enterprise-authorized AI capabilities to accelerate cybersecurity risk analysis and control assessment, validating outputs and handling data according to sensitivity and security requirements.
Provide technical guidance and direction to business and technical teams, contractors, and vendors, serving as a subject matter expert in one or more areas.
Work with stakeholders and senior business leaders to recommend business modifications during periods of vulnerability.
Contribute to the engineering community by advocating firm-wide frameworks, tools, and Software Development Life Cycle practices.
Drive reuse-first adoption of AI-assisted security validation in SDLC and toolchain routines to improve control testing, remediation quality, traceability, and auditability.
Lead cybersecurity architecture and design reviews for cloud platforms, SaaS solutions, Microsoft 365, AI-enabled services, and strategic technology integrations.
Conduct threat modeling, attack-surface analysis, and security architecture reviews to identify threats, attack paths, control gaps, and cybersecurity risks.
Evaluate cybersecurity risks associated with third-party integrations, APIs, application permissions, authentication patterns, data flows, external connectivity, and trust boundaries.
Assess existing security controls and develop practical mitigation strategies or compensating controls for insufficiently mitigated threats.
Partner with engineering and product teams to turn security findings into actionable remediation plans and drive issues toward resolution.