Tech Risk and Controls Lead

JPMorganChase • Columbus, OH

19h

About The Position

Join Corporate Technology to help mitigate technology risks, uphold operational excellence, and advance innovation in risk management. The Tech Risk and Controls Lead identifies and mitigates compliance and operational risks in accordance with firm standards, and provides subject matter expertise and technical guidance to technology-aligned process owners so controls operate effectively and comply with regulatory, legal, and industry standards. The role partners with Product Owners, Business Control Managers, regulators, and other stakeholders to report a comprehensive view of technology risk posture and its business impact. It applies advanced risk management knowledge to develop solutions and manage a diverse team in a dynamic risk environment.

The role also uses enterprise-authorized AI capabilities to support risk and controls work, including synthesis of risk and control evidence, executive-ready reporting, and recurring control testing and issue-management routines. AI-assisted outputs must be validated, handled according to data sensitivity and security requirements, and remain consistent with human review, auditability, and regulatory expectations.

Requirements

• At least 5 years of experience or equivalent expertise in technology risk management, cybersecurity, or a related field, with a focus on regulatory compliance and risk mitigation.
• Experience using enterprise-authorized AI capabilities in the work environment to support technology risk and controls workflows, with strong validation habits and awareness of data sensitivity.
• Ability to review and validate AI-assisted risk summaries and recommendations before use, escalate when uncertain, and ensure outcomes align with security, auditability, and regulatory expectations.
• Familiarity with risk management frameworks, industry standards, and financial-industry regulatory requirements.
• Proficient knowledge and expertise in data security, risk assessment and reporting, control evaluation, design, and governance, with a record of implementing effective risk mitigation strategies.
• Ability to influence executive-level strategic decision-making and translate technology insights into business strategies for senior executives.
• Familiarity with software development best practices.
• Understanding of information and technology asset management and data management processes.

Nice To Haves

• CISM, CRISC, CISSP, CISA, or similar industry-recognized risk certifications.
• Application Owner experience.

Responsibilities

• Ensure effective identification, quantification, communication, and management of technology risk, focusing on root-cause analysis and resolution recommendations.
• Use enterprise-authorized AI capabilities to synthesize risk and control evidence and draft executive-ready reporting, validating outputs and handling data according to sensitivity and security requirements.
• Develop and maintain trusted relationships with LOB technologists, assessment teams, and data officers to facilitate cross-functional collaboration and shared progress.
• Execute reporting and governance of controls, policies, issue management, and measurements; provide senior management with insights into control effectiveness and inform governance work.
• Monitor and evaluate control effectiveness, identify gaps, and recommend enhancements to strengthen risk posture and regulatory compliance.
• Promote reuse-first, AI-assisted approaches to streamline recurring control testing and issue/action-plan management routines, ensuring human review and alignment with auditability and regulatory expectations.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed