Tech Risk and Controls Lead

JPMorgan Chase & Co. • Jersey City, NJ

4d • $147,250 - $200,000

About The Position

JPMorganChase's Cybersecurity Technology Controls team is hiring an Assessments & Exercises Vice President for its Global Regulatory Assessments team. The role serves as the firm's PCI Subject Matter Expert, leading end-to-end Payment Card Industry (PCI) assessments in support of JPMorganChase's Multi-Level PCI Compliance Validation efforts. The position partners with external assessors, internal control owners, and business stakeholders to align assessments with PCI Data Security Standards (PCI DSS), translating technical complexity into clear business outcomes and delivering within established timeframes.

Requirements

• Formal training or certification in assessments and exercises concepts, with 10 or more years of applied experience.
• Demonstrated expertise in technology risk and controls, risk-based consulting, risk assessments, audit, and regulatory activities, with emphasis on PCI DSS.
• Comprehensive knowledge and practical experience across technology infrastructure domains and PCI DSS requirements, including implementation and oversight of technology risk and controls.
• Bachelor's degree in Computer Science, Management Information Systems, Accounting Information Systems, or a related field.
• Exceptional oral and written communication skills, including the ability to explain complex technical concepts to diverse audiences at all organizational levels and influence without direct authority.
• Proven planning, coordination, and cross-functional execution experience, with the ability to deliver quality outcomes across teams and functions.
• Strong attention to detail, analytical and decision-making abilities, and planning, time-management, and prioritization capabilities.

Nice To Haves

• Experience in environments heavily governed by compliance, regulatory, or risk-reduction controls, preferably in financial services.
• Proficiency in reviewing, understanding, and evaluating technical and software documentation to assess control suitability.
• Working knowledge of IT risk and process frameworks, including COSO, COBIT, NIST Cybersecurity Framework, and ITIL.
• Knowledge of process-focused methodologies for IT-related activities such as Change Management, Incident Management, and the Software Development Lifecycle (SDLC).
• Interest in and practical application of artificial intelligence, automation, and emerging technologies to enhance compliance and assessment processes.
• Ability to exercise sound judgment in ambiguous situations and balance regulatory requirements with business realities to develop pragmatic, risk-informed solutions.

Responsibilities

• Oversee and manage concurrent PCI assessments according to established methodologies, frameworks, and firm standards, using project management and stakeholder coordination to meet deadlines.
• Capture, review, and analyze PCI-required documentation for quality and suitability against PCI Security Standards Council requirements, exercising professional judgment on complex technical and compliance matters.
• Partner with business leads, control owners, and PCI team members to determine and validate assessment scope across people, processes, and technologies.
• Collaborate with external Qualified Security Assessors (QSAs) to facilitate assessments and align them with business objectives and regulatory requirements.
• Monitor key risk parameters to identify non-compliance and support remediation, including developing compensating controls for security, risk, and control gaps.
• Guide remediation activities and resolution of issues, action plans, and control breaks, and support closure verification.
• Develop and maintain business and technology relationships and serve as a trusted partner to diverse stakeholder groups.
• Communicate risk and control findings, develop actionable recommendations, and deliver timely, accurate metrics and management reporting.
• Use emerging technologies, including artificial intelligence and automation tools, to improve assessment efficiency, documentation quality, and risk identification.

Benefits

• Competitive total rewards package, including base salary determined by role, experience, skill set, and location.
• Eligible roles may receive commission-based pay and/or discretionary incentive compensation in cash and/or forfeitable equity.
• Comprehensive health care coverage.
• On-site health and wellness centers.
• Retirement savings plan.
• Backup childcare.
• Tuition reimbursement.
• Mental health support.
• Financial coaching.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior