Lead Cybersecurity Architect

Play a vital role in shaping the future of an iconic company and make a direct impact in a dynamic environment designed for top achievers.

As a Lead Cybersecurity Architect at JPMorganChase within the Cybersecurity and Technology Controls line of business, you are an integral part of a team that develops high-quality cybersecurity solutions across complex enterprise technologies.

As a core technical leader, you will identify and communicate cybersecurity risk, define practical mitigation strategies, influence target-state architecture, and drive security outcomes across multiple technology domains and business functions.

This role will have a particular focus on securing enterprise Collaboration & Communication technologies, including cloud platforms, SaaS services, Microsoft 365, technology integrations, and AI-enabled capabilities.

You will partner with engineering, product, architecture, risk, and business teams to shape cybersecurity strategy, perform threat modeling, assess control effectiveness, establish secure and reusable architecture patterns, and drive the secure adoption of modern technologies.
Job responsibilities


* Defines and influences cybersecurity architecture strategy and target-state security patterns across enterprise Collaboration & Communication technologies, cloud platforms, SaaS services, Microsoft 365, AI-enabled capabilities, and strategic technology integrations.


* Engages technical teams and senior business stakeholders to evaluate and recommend technical approaches that address current and future cybersecurity needs.


* Leads cybersecurity architecture and design reviews for complex and strategic technology initiatives, identifying threats, attack paths, control gaps, and cybersecurity risks and driving appropriate mitigation strategies.


* Leads threat modeling, attack-surface analysis, and security architecture assessments across applications, platforms, integrations, and emerging technologies.


* Evaluates cybersecurity risks associated with third-party integrations, APIs, application permissions, authentication and authorization patterns, data flows, external connectivity, and trust boundaries.


* Assesses existing security controls and defines practical mitigation strategies, compensating controls, and reusable security patterns and control baselines where identified threats are not sufficiently mitigated.


* Leads evaluation sessions with external vendors, technology providers, and internal teams to assess cybersecurity architecture, technical capabilities, security controls, and applicability within the firm's technology environment.


* Partners with engineering, product, architecture, and risk teams to translate cybersecurity findings into actionable remediation plans and drive complex issues toward resolution or appropriate risk escalation.


* Identifies opportunities to eliminate, automate, or prevent recurring cybersecurity issues through scalable controls, reusab...