Tech Risk and Controls[Multiple Positions Available]

JPMorganChase•Plano, TX

4d•Onsite

About The Position

This position involves identifying and mitigating AI/ML compliance and operational risks in line with the firm's standards. The role provides subject matter expertise and technical guidance to technology-aligned process owners, ensuring that implemented controls operate effectively and comply with regulatory, legal, and industry standards. The position contributes to reporting on the technology risk posture and its business impact by partnering with stakeholders such as Product Owners, Business Control Managers, and Senior Managers. It drives innovative solutions for AI/ML product lines in a dynamic risk landscape and facilitates cross-functional collaboration with LOB technologists, assessment teams, and data officers. The role also executes reporting and governance of controls, policies, issue management, and measurements, offering senior management insights into control effectiveness and informing governance work. Additionally, it monitors and evaluates control effectiveness, identifies gaps, and recommends enhancements to strengthen risk posture and regulatory compliance.

Requirements

Applying advanced technology risk management principles to identify, assess, and mitigate risks in Cloud and AI/ML environments within financial services including risk quantification and remediation
Designing, implementing, monitoring, and evaluating security and governance controls for cloud and AI/ML systems on AWS and Azure, aligned with risk management frameworks including NIST CSF, NIST SP 800-53, and ISO/IEC 27001
Ensuring compliance with standards and regulations including PCI DSS, SOX, SOC1 and GDPR
Conducting root cause analysis of risks related to Cloud and AI/ML, developing resolution recommendations, and implementing effective risk mitigation strategies
Data security including performing risk assessments, preparing risk reports, and evaluating control effectiveness for systems processing sensitive financial data
Providing advisory to implement and oversee guardrails for AI/ML use case development and deployment, and governance on AWS and Azure
Providing guidance to technology-aligned process owners, including the evaluation and remediation of control gaps in production environments
Providing executive reporting and governance oversight of controls, policies, issue management, and risk metrics, including preparing and presenting dashboards and key risk indicators to senior leadership and regulators
Translating complex technology risk insights into actionable business strategies for senior leadership
Building and maintaining cross-functional relationships with product owners, business control managers, assessment teams, and data officers to facilitate collaboration and achieve shared risk management goals
Coordinating and facilitating internal and external compliance audits and assessments including PCI DSS, SOX, and SOC 1, including audit planning and readiness, partnering with stakeholders to collect and review evidence, and tracking remediation and closure of findings.

Responsibilities

Identify and mitigate AI/ML compliance and operational risks in line with the firm's standards.
Provide subject matter expertise and technical guidance to technology-aligned process owners, ensuring that implemented controls are operating effectively and in compliance with regulatory, legal, and industry standards.
Contribute to the reporting of a comprehensive view of technology risk posture and its impact on the business by partnering with various stakeholders, including Product Owners, Business Control Managers, and Senior Managers.
Drive innovative solutions in a dynamic and evolving risk landscape for our AI/ML product line.
Partner with LOB technologists, assessment teams, and data officers to facilitate cross-functional collaboration and progress toward shared goals.
Execute reporting and governance of controls, policies, issue management, and measurements, offering senior management insights into control effectiveness and inform governance work.
Monitor and evaluate control effectiveness, identify gaps, and recommend enhancements to strengthen risk posture and regulatory compliance.
Conduct root cause analysis of risks related to Cloud and AI/ML, developing resolution recommendations, and implementing effective risk mitigation strategies.
Provide advisory to implement and oversee guardrails for AI/ML use case development and deployment, and governance on AWS and Azure.
Provide guidance to technology-aligned process owners, including the evaluation and remediation of control gaps in production environments.
Provide executive reporting and governance oversight of controls, policies, issue management, and risk metrics, including preparing and presenting dashboards and key risk indicators to senior leadership and regulators.
Translate complex technology risk insights into actionable business strategies for senior leadership.
Build and maintain cross-functional relationships with product owners, business control managers, assessment teams, and data officers to facilitate collaboration and achieve shared risk management goals.
Coordinate and facilitate internal and external compliance audits and assessments including PCI DSS, SOX, and SOC 1, including audit planning and readiness, partnering with stakeholders to collect and review evidence, and tracking remediation and closure of findings.