Technology Risk and Control Lead : Application Portfolio

JPMorganChase • Jersey City, NJ

6d

About The Position

As a Tech Risk and Controls Lead at JPMorganChase within Corporate Technology, you will identify and mitigate compliance and operational risks across a portfolio of applications. You will provide subject matter expertise and technical guidance to technology-aligned process owners, ensuring controls operate effectively and comply with regulatory, legal, and industry standards. Partnering with product owners, business control managers, and regulators, you will help provide a comprehensive view of the firm's technology risk posture and its business impact. The role calls for advanced knowledge of risk management principles, practices, and theories to develop innovative solutions in a dynamic and evolving risk landscape.

The position includes using enterprise-authorized AI capabilities to support risk and controls work, while validating outputs and meeting data sensitivity, security, auditability, and regulatory expectations. It also involves assessing AI and machine learning use cases developed by corporate functions and promoting reusable, AI-assisted approaches to recurring control testing and issue-management activities.

Requirements

• Formal training or certification in technology risk and controls concepts, with 5+ years of applied experience.
• At least 7 years of experience or equivalent expertise in technology risk management, cybersecurity, or a related field.
• Demonstrated experience using enterprise-authorized AI capabilities in technology risk and controls workflows, with strong validation habits and awareness of data sensitivity.
• Familiarity with risk management frameworks, industry standards, and financial industry regulatory requirements.
• Proficient knowledge and expertise in data security, risk assessment and reporting, control evaluation, design, and governance, with a proven record of implementing effective risk mitigation strategies.
• Demonstrated ability to influence executive-level strategic decision-making and translate technology risk insights into business strategies for senior leaders.

Nice To Haves

• Professional certification such as CISSP, CISM, CISA, CRISC, or CCSP.

Responsibilities

• Identify, quantify, communicate, and manage technology risk, focusing on root cause analysis and recommendations for resolution.
• Use enterprise-authorized AI capabilities to synthesize risk and control evidence and draft executive-ready reports, validating outputs and handling data in accordance with sensitivity and security requirements.
• Apply AI and machine learning governance processes when assessing risks and controls for use cases developed by corporate functions.
• Build and maintain relationships with line-of-business technologists, assessment teams, and data officers to facilitate collaboration and progress toward shared goals.
• Execute reporting and governance for controls, policies, issue management, and measurements, and provide senior management with insights into control effectiveness.
• Monitor and evaluate control effectiveness, identify gaps, and recommend enhancements to strengthen risk posture and regulatory compliance.
• Promote reuse-first, AI-assisted approaches to recurring control testing and issue and action plan management, ensuring human review and alignment with auditability and regulatory expectations.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed