Technology Risk and Control Lead

Job Description

Be an integral part of an agile team that constantly pushes the envelope to enhance, build, and deliver top‑notch technology products. As the Tech Risk and Controls Lead in JPMorgan Chase’s Corporate – FS Production Services, you will execute the firm’s technology risk management strategy. You will identify and mitigate technology risks, provide subject‑matter expertise to technology‑aligned process owners, and ensure controls operate effectively and comply with regulatory, legal, and industry standards.

You will collaborate with stakeholders such as Application Owners, Product Owners, and Control Managers, contribute to reporting on technology risk posture, and drive innovative solutions while managing a diverse team in a dynamic risk landscape.

• Ensure effective identification, quantification, communication, and management of technology risk, focusing on root cause analysis and resolution recommendations.
• Lead and participate in technology audit engagements, from planning to reporting, delivering quality deliverables within time and budget constraints.
• Finalize audit findings, provide overall opinion on the control environment, and develop recommendations to strengthen internal controls.
• Use enterprise‑authorized AI capabilities within the work environment to accelerate synthesis of risk/control evidence and draft executive‑ready reporting.
• Engage and support stakeholders across Global Technology, 2nd and 3rd lines of defense, and regulators.
• Develop and maintain periodic analytics to provide management with insights into emerging trends and key risks.
• Communicate audit findings to management and identify opportunities for improvement in key controls.
• Promote reuse‑first, AI‑assisted approaches to streamline recurring control testing and issue/action‑plan management routines.
• Build and maintain robust relationships with technologists, assessment teams, and data officers to facilitate cross‑functional collaboration.
• Proactively monitor and evaluate control effectiveness, identify gaps, and recommend enhancements to strengthen risk posture and regulatory compliance.

• 5+ years of experience or equivalent expertise in technology risk management, information security, or related field.
• Familiarity with risk management frameworks, industry standards, and technology regulatory requirements.
• Proficient knowledge of resiliency, data security, risk assessment & reporting, controls evaluation, design, execution, and governance.
• Experience using enterprise‑authorized AI capabilities within the work environment for technology risk and controls workflows.
• Ability to review and validate AI‑assisted risk summaries and recommendations before use, escalating when uncertain.
• Demonstrated ability to influence management‑level strategic decision‑making and translate technology insights into business strategies for senior executives.

• CISM, CISA, CRISC, CISSP, or similar industry‑recognized risk certifications.
• Proficiency with Microsoft suite (PowerPoint, Excel, Word).
• Experience with Atlassian tools (JIRA, Confluence).
• Former auditor within technology monitoring.
• Cybersecurity lead within remediation.
• Technology engineer with risk focus and strong infrastructure/configuration domain knowledge.

We offer a competitive total rewards package, including a base salary based on role, experience, skill set, and location. Eligible roles may receive commission‑based pay and/or discretionary incentive compensation. Benefits include comprehensive health care coverage, on‑site health and wellness centers, retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching, and more. Additional details on compensation and benefits will be provided during the hiring process.

JPMorgan Chase & Co. is an Equal Opportunity Employer, including Disability/Veterans. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy, disability, or any other basis protected under applicable law. We also provide reasonable accommodations for applicants’ and employees’ religious practices and mental health or physical disability needs.