Tech Risk and Controls Lead

JPMorganChase • Columbus, OH

11h

About The Position

Join JPMorgan Chase’s Employee Platforms / Workforce and Experience Technology team to help mitigate technology risks and uphold operational excellence while driving innovation in risk management. The Tech Risk & Controls Lead identifies and mitigates compliance and operational risks in accordance with the firm’s standards, and provides subject matter expertise and technical guidance to technology-aligned process owners. The role ensures that controls operate effectively and comply with regulatory, legal, and industry standards. Working with Product Owners, Business Control Managers, regulators, and other stakeholders, the lead contributes to a comprehensive view of technology risk posture and its business impact. The position also uses advanced risk management expertise to develop solutions and manage a diverse team in a dynamic risk landscape.

Requirements

• At least 5 years of experience or equivalent expertise in technology risk management, information security, or a related field, with emphasis on risk identification, assessment, and mitigation.
• Familiarity with risk management frameworks, industry standards, and financial-industry regulatory requirements.
• Proficient knowledge of data security, risk assessment and reporting, control evaluation, design, and governance, with a record of implementing effective risk mitigation strategies.
• Ability to influence executive-level strategic decision-making and translate technology insights into business strategies for senior executives.

Nice To Haves

• CISM, CRISC, CISSP, or similar industry-recognized risk certifications.
• Experience with third-party vendor risk assessments and partnering with procurement, legal, and technology teams to assess and manage third-party risk, document findings, and drive mitigations.
• Experience, curiosity, or knowledge of applying AI security concepts to strengthen governance, risk, and control frameworks.
• Knowledge of generative AI, MCP, and agentic systems, including threats, controls, mitigations, industry frameworks, compensating controls, and guardrails.

Responsibilities

• Identify, quantify, communicate, and manage technology risks, emphasizing root cause analysis and recommendations for resolution.
• Build and maintain trusted relationships with line-of-business technologists, assessment teams, and data officers to support cross-functional collaboration and shared goals.
• Execute reporting and governance for controls, policies, issue management, and measurements; provide senior management with insights into control effectiveness and inform governance work.
• Monitor and evaluate control effectiveness, identify gaps, and recommend enhancements to strengthen risk posture and regulatory compliance.
• Provide subject matter expertise and technical guidance to technology-aligned process owners.
• Partner with stakeholders, including Product Owners, Business Control Managers, and regulators, to report on technology risk posture and its business impact.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed