Tech Risk and Controls[Multiple Positions Available]

JPMorgan Chase & Co.•Plano, TX

4d•Onsite

About The Position

This role involves identifying and mitigating AI/ML compliance and operational risks in alignment with firm standards. The position provides subject matter expertise and technical guidance to technology-aligned process owners, ensuring controls operate effectively and comply with regulatory, legal, and industry standards. It contributes to reporting on the technology risk posture and its business impact by collaborating with stakeholders such as Product Owners, Business Control Managers, and Senior Managers. The role drives innovative solutions for the AI/ML product line in a dynamic risk landscape and partners with LOB technologists, assessment teams, and data officers to foster cross-functional collaboration. Responsibilities include executing reporting and governance of controls, policies, issue management, and measurements, offering senior management insights into control effectiveness and informing governance work. The role also involves monitoring and evaluating control effectiveness, identifying gaps, and recommending enhancements to improve risk posture and regulatory compliance.

Requirements

Master's degree in Management Information Systems, Electrical and Electronics Engineering, Computer Science, Information Technology, or related field of study plus 4 years of experience in the job offered or as Tech Risk and Controls, Security Analyst, Information Security Risk Analyst, Information Security Analyst, or related occupation.
Alternatively, a Bachelor's degree in Management Information Systems, Electrical and Electronics Engineering, Computer Science, Information Technology, or related field of study plus 6 years of experience in the job offered or as Tech Risk and Controls, Security Analyst, Information Security Risk Analyst, Information Security Analyst, or related occupation.
Applying advanced technology risk management principles to identify, assess, and mitigate risks in Cloud and AI/ML environments within financial services including risk quantification and remediation.
Designing, implementing, monitoring, and evaluating security and governance controls for cloud and AI/ML systems on AWS and Azure, aligned with risk management frameworks including NIST CSF, NIST SP 800-53, and ISO/IEC 27001.
Ensuring compliance with standards and regulations including PCI DSS, SOX, SOC1 and GDPR.
Conducting root cause analysis of risks related to Cloud and AI/ML, developing resolution recommendations, and implementing effective risk mitigation strategies.
Data security including performing risk assessments, preparing risk reports, and evaluating control effectiveness for systems processing sensitive financial data.
Providing advisory to implement and oversee guardrails for AI/ML use case development and deployment, and governance on AWS and Azure.
Providing guidance to technology-aligned process owners, including the evaluation and remediation of control gaps in production environments.
Providing executive reporting and governance oversight of controls, policies, issue management, and risk metrics, including preparing and presenting dashboards and key risk indicators to senior leadership and regulators.
Translating complex technology risk insights into actionable business strategies for senior leadership.
Building and maintaining cross-functional relationships with product owners, business control managers, assessment teams, and data officers to facilitate collaboration and achieve shared risk management goals.
Coordinating and facilitating internal and external compliance audits and assessments including PCI DSS, SOX, and SOC 1, including audit planning and readiness, partnering with stakeholders to collect and review evidence, and tracking remediation and closure of findings.

Responsibilities

Identify and mitigate AI/ML compliance and operational risks in line with the firm's standards.
Provide subject matter expertise and technical guidance to technology-aligned process owners, ensuring that implemented controls are operating effectively and in compliance with regulatory, legal, and industry standards.
Contribute to the reporting of a comprehensive view of technology risk posture and its impact on the business by partnering with various stakeholders, including Product Owners, Business Control Managers, and Senior Managers.
Drive innovative solutions in a dynamic and evolving risk landscape for our AI/ML product line.
Partner with LOB technologists, assessment teams, and data officers to facilitate cross-functional collaboration and progress toward shared goals.
Execute reporting and governance of controls, policies, issue management, and measurements, offering senior management insights into control effectiveness and inform governance work.
Monitor and evaluate control effectiveness, identify gaps, and recommend enhancements to strengthen risk posture and regulatory compliance.