Tech Risk and Controls Lead

Join our team to play a pivotal role in mitigating tech risks and upholding operational excellence, driving innovation in risk management.

As a Tech Risk Controls Lead at JPMorganChase within Corporate - Employee Platforms, your role is to protect the firm and strengthen operational excellence through technology, business, and operational resiliency.

In this role you will report to the Head of Resiliency for Employee Platforms, where you will govern compliance with resiliency control objectives and advance a strategy that enables critical business services to withstand and recover from disruption.

You will lead initiatives spanning technology, cloud, cyber and operational recovery, while modernizing the resiliency function through responsible use of AI, automation and data-driven insights.

As part of the Employee Platforms Resiliency organization, you will embed resiliency throughout the technology lifecycle; maintain regulatory, recovery planning, testing and control-procedure compliance; and partner with senior stakeholders across Engineering, Architecture, Product, Infrastructure, Cybersecurity, Operations, Risk and Business teams.

Your key responsibility is the Employee Platforms Permit-to-Operate (PTX) process, incorporating recovery, availability, cloud, cyber and operational resilience requirements early enough to identify and remediate gaps before production.

Job responsibilities



* Identifies, quantifies, communicates and manages technology risk, including root-cause analysis, control-gap assessment and actionable remediation recommendations.


* Executes Employee Platforms resiliency governance and roadmap priorities across technology recovery, cyber recovery, public and hybrid cloud, operational resiliency and business service readiness.


* Governs resiliency control procedures, recovery plans, testing obligations, metrics, issues and action plans; provides executive reporting and insight on control effectiveness, risk posture and compliance.


* Leads PTX resiliency governance by partnering with Engineering, Architecture, Product, Application Owners and SRE teams to validate requirements before production and improve recoverability, availability, fault tolerance, scalability, observability and operational resilience.


* Oversees recovery planning, recovery testing, cyber and data recovery, documentation and non-compliant controls at application, platform and component levels, including Technology Recovery Action Plans and Application Recovery Plans.


* Supports test planning, execution, evidence collection and reporting; regulatory, audit and control reviews; and remediation of resiliency findings and action plans.


* Aligns technology recovery capabilities with business continuity objectives by validating service readiness, recovery dependencies and stakeholder response procedures.


* Builds trusted partnerships with Lines of Business, Cybersecurity and Technology Controls, Firmwide Business Resil...