Tech Risk and Controls Lead — Tech Resiliency Testing

JPMorgan Chase & Co.•Plano, TX

About The Position

As a Tech Risk & Controls Lead within the Infrastructure Platforms (IP) team, you will identify and mitigate compliance and operational risks in line with firm standards. You will provide subject matter expertise and technical guidance to technology-aligned process owners, help ensure controls operate effectively and comply with regulatory, legal, and industry standards, and work with Product Owners, Business Control Managers, regulators, and other stakeholders to report the firm’s technology risk posture and its business impact. The role calls for advanced risk-management knowledge and the ability to lead in a dynamic and evolving risk environment. You will lead Technology Resiliency testing across the firm’s worldwide datacenter and cloud estate, owning the planning, execution, and closure of resiliency events. You will represent Infrastructure Platforms in Technology Resiliency, partner with lines of business and Cybersecurity and Technology Controls, and help improve the Resiliency Operating Framework in line with firmwide and regulatory obligations. AI-assisted work is central to the role: you will use authorized AI capabilities to automate manual effort, improve documentation, analyze test and incident data, and enhance the quality and speed of team processes. The position requires flexibility to work weekends, on average once a month, because many resiliency events are scheduled outside business hours.

Requirements

At least 5 years of experience or equivalent expertise in technology risk management, cybersecurity, or a related field, focused on regulatory compliance and risk mitigation.
Demonstrated experience using enterprise-authorized AI capabilities in the work environment for technology risk and controls workflows, with strong validation habits and awareness of data sensitivity.
Ability to review and validate AI-assisted risk summaries and recommendations before use, escalate when uncertain, and ensure outcomes meet security, auditability, and regulatory expectations.
Strong overall technology background, including hands-on platform, infrastructure, or production support experience.
Experience planning and coordinating datacenter or cloud resilience, disaster recovery, or technology power-down events, with working knowledge of failover and failback strategies and concepts such as RTO, RPO, HA, and DR.
Hands-on experience with AWS products and services, including services used for resilience, backup, replication, and multi-region recovery.
Practical hands-on proficiency with LLM tools such as Claude and AI-assisted development environments such as VS Code, applied to automating and improving day-to-day work.
Proficient knowledge of risk management and technology resiliency frameworks, control evaluation, design and governance, risk assessment, and reporting.
Program or project management discipline across scope, schedule, critical path, and deliverables; proven success leading a team or function to metrics and quality targets; and strong analytical and problem-solving skills.
Demonstrated ability to influence executive-level decisions and negotiate competing priorities, with executive presence and excellent verbal, written, and presentation skills.
BS/BA degree in a related technical or business discipline, or equivalent practical experience.

Nice To Haves

Financial services industry experience, knowledge of financial industry regulatory requirements for technology resiliency, and familiarity with Control Objectives and Procedures.
Experience in large, global, multicultural organizations supporting mission-critical, highly available applications, including third-party vendor management.
Track record of measurable efficiency gains through AI and automation, including prompt engineering, AI agents, or workflow orchestration, and ability to evangelize and scale those practices across a team.
Modern engineering skills such as scripting or programming, data analytics, and cloud engineering (for example, Infrastructure-as-Code, CI/CD, or observability tooling), along with a desire for continued self-improvement.
Business continuity accreditation (for example, CBCP) and/or AWS certification (for example, Cloud Practitioner or Sys Ops Administrator).

Responsibilities

Own the end-to-end lifecycle of datacenter and cloud resiliency test events, including scoping against compliance status, scheduling, preparing run-books, and managing deliverables such as change records and testing timetables.
Use enterprise-authorized AI capabilities to synthesize risk and control evidence and draft executive-ready reporting, validating outputs and handling data according to sensitivity and security requirements.
Lead live test execution on behalf of Infrastructure Platforms, run the command center, secure stakeholder participation, and keep business partners and senior management informed.
Identify, quantify, and communicate resiliency risk through post-test and post-incident analysis; evaluate successful and failed recoveries, perform root-cause analysis, and drive retests or corrective actions through closure.
Promote practical AI adoption across the team, using tools such as Claude and VS Code-based AI-assisted development to automate work, accelerate run-book and documentation production, and reduce touchpoints during failover and recovery events.
Promote reusable, AI-assisted approaches to recurring control testing and issue/action-plan management, retaining human review and meeting auditability and regulatory expectations.
Use AI to analyze test results, incident history, and compliance data at scale; identify recurring failure modes and remediation priorities; embed reusable prompts and patterns in team processes; and coach colleagues on effective, responsible use.
Drive the resiliency roadmap across public and private cloud and cyber resiliency controls, using AWS services to design, test, and evidence multi-region, multi-availability-zone, and hybrid datacenter-to-cloud recovery.
Monitor and evaluate resiliency controls against Firmwide Business Resilience standards, including Technology Recovery Action Plans (TRAP) for cyber and data-loss scenarios, and identify gaps and recommend enhancements.
Execute reporting and governance for test compliance, controls, and issue management, providing senior management with insight into risks, exceptions, requests not to test, and escalations.
Develop and maintain relationships with application and product owners, line-of-business technologists, Cybersecurity and Technology Controls, and Firmwide Business Resilience partners to align on resiliency outcomes.

Benefits

Competitive total rewards package, including base salary determined by role, experience, skill set, and location.
Eligible roles may receive commission-based pay and/or discretionary incentive compensation in cash and/or forfeitable equity.
Comprehensive health care coverage.
On-site health and wellness centers.
Retirement savings plan.
Backup childcare.
Tuition reimbursement.
Mental health support.
Financial coaching.
Additional benefits and programs based on eligibility.