Technology Operational Management Director (Infrastructure & Cloud Technology Operational Risk) - Executive Director

JPMorgan Chase & Co.•New York, NY

2d•$185,250 - $285,000

About The Position

As part of Risk Management and Compliance, you are at the center of keeping JPMorganChase strong and resilient. You help the firm grow its business in a responsible way by anticipating new and emerging risks and using your expert judgement to solve real-world challenges that impact our company, customers and communities. Our culture in Risk Management and Compliance is all about thinking outside the box, challenging the status quo and striving to be best-in-class. As a Technology Operational Risk Management Executive Director in Tech & Cyber Operational Risk Management team, you will provide independent oversight of operational risk for cloud and infrastructure platforms, tools, and supporting systems. You partner with technology and cybersecurity teams to review how solutions are developed, deployed, and operated, and you assess the effectiveness of processes and controls aligned to the CCOR Tech & Cyber framework. You proactively identify emerging technology and third-party risks and provide pragmatic recommendations that help us meet policy, regulatory, and industry expectations.

Requirements

Subject matter expertise in infrastructure and cloud technology domains, including operational processes and control expectations
Demonstrated hands-on experience across enterprise infrastructure components (network, compute, storage, database, and messaging), in on-prem and cloud environments
Working knowledge of network engineering concepts such as routing and switching, DNS/DHCP, load balancing, firewalls/WAF, proxy, segmentation, and VPN/private connectivity
Experience with compute and virtualization, including Linux/Windows, private cloud, and cloud compute primitives, plus reliability and hardening controls
Knowledge of storage and data protection practices, including backup/restore, replication, retention, and disaster recovery
Working knowledge of database platforms, including relational and NoSQL services, encryption, access controls, performance, and lifecycle management
Hands-on experience with at least one major public cloud provider (AWS, GCP, or Azure) and awareness of multi-cloud considerations
Knowledge of cloud security and compliance practices, including IAM, encryption/key management, vulnerability management, and relevant control frameworks
Familiarity with infrastructure as code and automation (e.g., CloudFormation, ARM, Deployment Manager, Terraform, Ansible)
Familiarity with DevOps and CI/CD practices, including controls around change management, segregation of duties, and secure pipelines
Familiarity with monitoring, observability, and optimization practices, including logging/alerting, SLO/SLI concepts, and operational health reporting

Nice To Haves

Experience designing and managing scalable, secure, and highly available cloud solution architectures
Knowledge of cloud-native application design patterns, including microservices, containers, serverless, and event-driven architectures

Responsibilities

Perform independent reviews of global and regional technology and cybersecurity processes and controls supporting public and private cloud use
Assess operational risk for infrastructure and cloud platforms, tools, and supporting systems used to deliver technology services to the firm
Engage with infrastructure technology teams to build a clear understanding of the technology, data flows, and control environment
Evaluate third-party risks related to technology providers, services, and dependencies within your domain
Identify elevated risk concentrations globally and assess inherent risks and mitigating controls across relevant technology areas
Recommend control enhancements to align with JPMorganChase policies, regulatory requirements, and industry best practices
Track current technology trends, vulnerabilities, and emerging technologies to inform risk assessments and oversight priorities
Provide credible challenge and guidance to technology partners on control design, implementation, and operational effectiveness
Support the implementation and execution of the CCOR Tech & Cyber framework through consistent risk assessment and reporting
Participate in key technology governance forums and contribute to risk discussions and decisions
Document assessments, conclusions, and actions clearly to support transparency, auditability, and follow-through