Tech Risk and Controls Lead

Join our team to play a pivotal role in mitigating tech risks and upholding operational excellence, driving innovation in risk management.

As a Technology Risk and Controls Lead at JPMorganChase within Cybersecurity Technology and Controls, you will identify and mitigate compliance and operational risks in line with the firm's standards.

You will spearhead GRC transformation and change initiatives, leveraging your technical skills and deep understanding of controls to manage risks associated with technology risk management.

You will design, implement, and continuously enhance risk management frameworks, ensuring technology controls are effectively designed and adhere to regulatory, legal, and industry standards.

You will be part of a team that values high performance, operational excellence, and innovation.

Job responsibilities


* Lead and execute complex, cross-functional GRC programs and initiatives, ensuring strategic outcomes and alignment with business objectives


* Communicate program status, execution risks, issues, and key decisions to senior stakeholders, maintaining transparency and fostering informed decision-making


* Identify, manage, and mitigate delivery risks, proactively addressing potential roadblocks and implementing contingency plans to maintain program momentum


* Partner with key stakeholders to iterate on design, implement, and continuously operate and enhance technology risk and control frameworks, ensuring they meet industry standards and regulatory requirements


* Promote a culture of high performance, operational excellence, and innovation within the GRC team, driving continuous improvement in risk management practices

Required qualifications, capabilities, and skills


* Formal training or certification on security concepts and 5+years of applied experience in technical program management, cybersecurity, or technology controls roles


* Proficiency in cybersecurity domains, including policies and standards, risk and control assessments, and regulatory compliance


* Proficiency in regulatory, legal, and industry standards such as NIST, ISO 27000 family, COBIT, FSP


* Experience in developing, implementing, and operating robust risk and control frameworks to mitigate technology failure and cybersecurity risks


* Ability to ensure decisions or constraints affecting program delivery are effectively escalated and addressed in a timely manner


* Strong verbal and written communication skills to translate technical risks into business impacts and engage with stakeholders at all levels


* Strong analytical skills to dissect complex challenges, conduct thorough root cause analysis, and develop effective solutions


* Proven ability to apply critical thinking and structured problem-solving techniques to address issues and drive continuous improvement in risk management practices

Preferred qualifications, capabilities, and skills


* CISM, CRISC, CISSP, or similar industr...