Tech Risk & Controls Lead - Audit & Issue Management

JPMorgan Chase & Co.•Houston, TX

About The Position

Leveraging deep expertise in risk, controls, and audit, this role influences secure IT operations firmwide by: Providing guidance, best practices, and subject-matter support to lines of business Driving and overseeing appropriate corrective actions to reduce operational risk Ensuring alignment with regulatory expectations and internal control standards Collaborating across stakeholders to strengthen control design and operating effectiveness Duties/Responsibilities include but are not limited to: Work with all three JPMC Lines of Defense to ensure the accuracy of statements and identified risk Partner with other Tech Risk & Control personnel to ensure appropriate root cause analysis to confirm thorough understanding of findings/observations Ensure only qualified risks are entered into CORE and adhere to GRC quality requirements for Issues Provide auditability, risk, and sustainability advisement and approval for all identified Issues Ensure Issue Action Plans (APs) sufficiently and sustainably address the identified risk Review/approve all Issue and AP closure documentation Establish and maintain strong relationships with internal and external stakeholders, including key cross-functional team leads, to ensure compliance with Firm Issue Management Standards and Procedures Respectfully challenge viewpoints of all three Lines of Defense Review/approve all Issue and AP completion evidence This role requires a wide variety of strengths and capabilities, including: 5+ years of experience in technology audit, expertise in technology risk management, information security, or a related field, with a focus on managing risk identification, assessment, and mitigation In-depth experience in audit and risk management practices/functions CISA designation required, CRISC designation preferred Advanced knowledge of IT control frameworks Proficiency in information security domains, including policies and standards, risk and control assessments, access controls, regulatory compliance, technology resiliency, risk and control governance and metrics, incident management, secure systems development lifecycle, vulnerability management, and data protection Experience working across large complex business and technical environments Ability to collaborate with high-performing teams and individuals throughout the firm to accomplish common goals JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world’s most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management. We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process. We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs [https://careers.jpmorgan.com/us/en/how-we-hire/faqs] for more information about requesting an accommodation. JPMorgan Chase & Co. is an Equal Opportunity Employer, including Disability/Veterans Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we’re setting our businesses, clients, customers and employees up for success.

Requirements

5+ years of experience in technology audit, expertise in technology risk management, information security, or a related field, with a focus on managing risk identification, assessment, and mitigation
In-depth experience in audit and risk management practices/functions
CISA designation required
Advanced knowledge of IT control frameworks
Proficiency in information security domains, including policies and standards, risk and control assessments, access controls, regulatory compliance, technology resiliency, risk and control governance and metrics, incident management, secure systems development lifecycle, vulnerability management, and data protection
Experience working across large complex business and technical environments
Ability to collaborate with high-performing teams and individuals throughout the firm to accomplish common goals

Nice To Haves

CRISC designation

Responsibilities

Work with all three JPMC Lines of Defense to ensure the accuracy of statements and identified risk
Partner with other Tech Risk & Control personnel to ensure appropriate root cause analysis to confirm thorough understanding of findings/observations
Ensure only qualified risks are entered into CORE and adhere to GRC quality requirements for Issues
Provide auditability, risk, and sustainability advisement and approval for all identified Issues
Ensure Issue Action Plans (APs) sufficiently and sustainably address the identified risk
Review/approve all Issue and AP closure documentation
Establish and maintain strong relationships with internal and external stakeholders, including key cross-functional team leads, to ensure compliance with Firm Issue Management Standards and Procedures
Respectfully challenge viewpoints of all three Lines of Defense
Review/approve all Issue and AP completion evidence