Tech Risk Assurance Lead

Shape the firm’s risk culture by leading technology risk assurance, control design, and oversight across products and teams.

Opportunity to shape risk culture and ensure technological safeguards in a dynamic, collaborative environment.

As a Tech Risk Assurance Lead at JPMorgan

Chase within Standards and Controls, you will lead technical risk assurance, control design, and oversight to help our products and lines of business achieve their objectives while effectively managing risk. You will partner with cross-functional stakeholders to identify, assess, and mitigate emerging risks and vulnerabilities across processes, systems, and operations. Your work will influence how we manage operational resilience, financial exposure, and reputational risk by strengthening governance, improving control effectiveness, and reinforcing a strong risk culture.

You will also help drive continuous improvement by contributing to the evolution and implementation of risk management policies, standards, and controls.

• Lead the design, development, and implementation of comprehensive risk management policies, standards, and controls
• Lead risk assessments to identify threats and vulnerabilities across processes, systems, and operations, and develop pragmatic mitigation strategies
• Advise stakeholders on risk management, control design, and control adherence to reduce technology risk
• Monitor key risk indicators, analyze control performance metrics, and provide insights to senior management to drive continuous improvement
• Engage with regulators, clients, and internal stakeholders on risk-related matters, providing oversight to support compliance with laws, regulations, and internal policies

• Formal training or certification on software engineering concepts and 5+ years applied experience
• 5+ years of experience or equivalent expertise in technology risk management, information security, or a related field, with a focus on risk assessment and control evaluation
• Demonstrated expertise in regulatory compliance, risk management frameworks, and industry best practices (for example, NIST, ISO, FFIEC, GDPR)
• Proficiency in data security, risk management and controls, security governance, and analytical thinking, with a track record of implementing effective mitigation strategies
• Advanced knowledge of data analytics and data literacy

• Certified in Risk and Information Systems Control (CRISC) certification

#CTC