Technology Risk and Controls Lead - Identity Access

Are you ready to make a meaningful impact in the world of technology access and controls? We invite you to join our Employee Platforms Technology team as an Identity and Access Risk and Controls Lead.

In this inclusive and dynamic role, your unique skills and perspectives will be valued as you help shape our strategy.

You will be an essential member of our team, overseeing various workstreams within our firmwide access controls program, and ensuring that our approach is innovative and effective.

Your contributions will be instrumental in driving our mission forward, and we welcome candidates from all backgrounds to apply and bring their diverse experiences to our team.

As a Technology Risk and Controls Lead at JP Morgan Chase within Corporate Employee Platforms team, you will be key leader with collaborating on our access controls and standards strategy.

Your role will involve being a key point of contact for the organization on multiple workstreams of the firmwide Identity and Access Controls programs.

You will be instrumental in promoting the continuous improvement of our Operating Framework, ensuring it aligns with our firmwide and regulatory obligations.

Job responsibilities


* Supports the identity and access controls operating model framework, providing domain expertise as guidance to application and product owners.

Ensuring all related compliance objectives are met on time.


* Collaborates with Stakeholders, including Application Owners, Product Owners, Engineers, Tech and Business Control Managers, and Software Reliability Engineers to ensure alignment and integration of core practices across the firm.


* Achieves risk and performance measures to continuously validate and assess the effectiveness of access controls, incorporating them into reporting and escalation processes.


* Participates in post incident response, planning and root cause analysis to ensure quick lessons learned from disruptions and establish action items for gap remediation.


* Supports the development and implementation of our comprehensive identity and access controls strategy that integrates business and technology risk management to mitigate risk.


* Has experience in Identity Access Management (IAM) and Privileged Access Management solution adoption.


* Understands PAM concepts - principles of least privilege, credential vaulting, session management, secrets management.


* Understands infrastructure and application access concepts - authentication, authorization, identity federation, Kerberos, Active Directory, AWS IAM, Entra ID, SAML, OIDC, SSH

Required qualifications, capabilities, and skills


* 5+ years of extensive experience focusing on identity management, program management, or controls.


* Proficient knowledge in core infrastructure technologies and experience with cloud provider products and services.


* Strong ability to influence and drive change, with a proactive approach to identifying potential issues...