Director of Security Engineers

DESCRIPTION:

Duties: Cultivate security culture with product technology and business colleagues by embedding threat modelling, solutions architecture, and secure code review into assigned products/applications, in order to create secure products.

Prioritize adopting sustainable product controls in an effort to drive real risk reduction outcomes.

Identify and research unfamiliar technology components, capabilities, and business concepts that could impact the product's security.

Serve as security thought leader for the assigned product, learning the assigned product fully and striving for fluency within the assigned product's strategy and roadmap as well as its key investment programs.

Share reciprocal best practices with product and cybersecurity teams.

For assigned product, serve as clear point of escalation and subject matter expert for IT Risk and Cyber domains, and act with urgency when managing emerging security issues.

Proactively monitor Key Risk Indicators to ensure issues are identified, quantified, communicated, and managed in a timely manner, including recommendations for resolution, and identifying the root cause/key themes.

Partner and influence across your product's supply chain, working collaboratively with product, technology, and business colleagues on an on-going basis for business-as-usual audit and regulatory engagements, risk activities, and project initiatives.

Work closely with Third Party Oversight teams to ensure effective technology risk management of vendors engaged by technology partners, with a focus on Cloud computing and emerging technologies.

Apply technical knowledge and problem-solving methodologies to analyze complex data/systems, anticipate issues, and mitigate risks.

Work with other Engineering and Platform teams to architect and rapidly iterate on designs, patterns, or changes required to resolve issues and modernize the organization and its technology processes.

Drive decisions that influence product design, application functionality, and technical operations and processes.

Advise and mentor engineers and technologists, fostering a culture of continuous learning and development.

Execute work according to compliance standards, risk and security, and business objectives.

Responsible for staffing, budget, and relevant profit and loss (P&L).

Champion the firm's culture of diversity, equity, inclusion, and respect.

This position requires up to 10% travel (domestic and international) to other JPMC offices for internal meetings.

QUALIFICATIONS:

Minimum education and experience required: Twelve (12) years of experience in the job offered or as Director of Security Engineers, Manager/Director of Technology Services/Network Services/Systems Integrity, Senior Systems/Database Administrator, Senior Data Warehouse/Programmer Analyst, or related occupation.

The employer will alternatively accept a Bachelor's degree in any field of study plus ten (10) years of experience in the job offered or as Director of Security E...