Infrastructure Platforms PTX - Technology Risk & Controls Lead

Join us to shape the future of technology risk management and make a meaningful impact on our Infrastructure Platforms PTX program. You’ll collaborate with talented teams, influence senior leaders, and help set the standards for risk and controls. At JPMorgan

Chase, you’ll find opportunities for growth, a culture of innovation, and the chance to make your mark in a dynamic environment. Bring your expertise and passion for technology risk - let's raise the bar together.

Job Summary:
As a Technology Risk & Controls Oversight professional in the Infrastructure Platforms PTX program, you will provide independent oversight and guidance to ensure robust risk management and control effectiveness. You will partner with the PTX operations team to establish standards, monitor adherence, and challenge risk decisions. Your insights will help senior leaders understand control effectiveness and residual risk. You’ll play a key role in governing issue management and maintaining audit-ready evidence.

Together, we’ll drive a culture of accountability and continuous improvement.

Job Responsibilities:

• Identify, quantify, communicate, and manage technology risk, focusing on root cause analysis and actionable recommendations
• Build and maintain strong partnerships with technologists, assessment teams, and data officers to drive collaboration and shared goals
• Oversee reporting and governance of controls, policies, and issue management, providing senior management with clear insights
• Monitor and evaluate control effectiveness, identify gaps, and recommend enhancements to strengthen risk posture and compliance
• Integrate PTX control requirements into testing plans; track results, remediation timelines, and issue aging to reduce residual risk
• Curate and maintain audit-ready PTX artifacts, such as operational readiness checklists and evidence repositories
• Respond to regulatory and audit inquiries with accurate and timely information
• Ensure correct control checks are embedded within the PTX process

Required Qualifications , Capabilities, and

Skills:

• Expertise in technology risk management, information security, or a related field, with a focus on risk identification, assessment, and mitigation
• Familiarity with risk management frameworks, industry standards, and financial industry regulatory requirements
• Strong knowledge of data security, risk assessment and reporting, control evaluation, and governance
• Ability to influence executive-level decision-making and translate technology insights into business strategies
• Experience governing complex infrastructure platforms or cloud deployments through formal lifecycle approvals (such as PTX or equivalent)
• Hands-on experience with control testing, evidence management, and issue management in a regulated environment
• Understanding of infrastructure security domains, including identity and access management, configuration baselines, vulnerability management, network segmentation, and monitoring
• Ability to synthesize technical control posture into concise executive narratives and risk decisions
• Exceptional stakeholder management and facilitation skills across technology, risk, audit, and product teams
• Industry-recognised risk certifications such as CISM, CRISC, or CISSP
• Familiarity with frameworks and regulations such as NIST CSF, ISO 27001, SOX ITGC, FFIEC, OCC Heightened Standards, and PCI DSS

Preferred Qualifications , Capabilities, and

Skills:

• Experience with AI prompt engineering to enhance stakeholder engagement and process efficiency
• Additional industry-recognised risk certifications (CISM, CRISC, CISSP)
• Experience working directly with internal audit and external regulators on technology control assessments
• Background in platform engineering, SRE, or cloud governance
• Ability to develop control metrics and dashboards; proficiency with data analysis and reporting tools