Lead Cybersecurity Architect

Play a vital role in shaping the future of an iconic company and make a direct impact in a dynamic environment designed for top achievers.

As a Sr Lead Cybersecurity Architect at JPMorgan

Chase within Cybersecurity and Technology Controls, you are an integral part of a team that works to develop high-quality cybersecurity solutions for various software applications and platform products. Drive significant business impact through your capabilities and contributions, and apply deep technical expertise and problem-solving methodologies to tackle a diverse array of cybersecurity challenges that span multiple technology domains.

• Guide evaluation of current cybersecurity principles, processes, and controls, and lead evaluation of new technology using existing standards and frameworks, influencing peers and decision-makers to adopt leading-edge solutions where appropriate
• Leverage enterprise-authorized AI capabilities within the work environment to accelerate cybersecurity risk analysis and control assessment, validating outputs and handling data according to sensitivity and security requirements
• Provide technical guidance and direction to support the business and its technical teams, contractors, and vendors, serving as a function-wide subject matter expert in one or more areas of focus
• Partner with stakeholders and senior business leaders to recommend business modifications during periods of vulnerability
• Contribute actively to the engineering community as an advocate of firm-wide frameworks, tools, and practices of the software development lifecycle
• Drive reuse-first adoption of AI-assisted security validation within software development lifecycle and toolchain routines, improving control testing, remediation quality, and traceability and auditability in line with resiliency expectations

• Formal training or certification on cybersecurity architecture concepts and 5+ years applied experience
• Hands-on experience conducting threat modeling, attack-surface analysis, or security architecture assessments
• Hands-on practical experience delivering enterprise-level cybersecurity solutions and controls
• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support cybersecurity architecture workflows with strong validation habits and awareness of data sensitivity
• Ability to assess and validate AI-assisted security recommendations before adoption, escalating uncertainty and ensuring outcomes align to security, resiliency, and auditability expectations
• Advanced expertise in one or more programming languages and/or applications, with advanced knowledge of cybersecurity architecture, applications, and technical processes within one or more technical disciplines (e.g., public cloud, AI/ML, mobile)
• Ability to tackle design and functionality problems independently with little to no oversight
• Ability to evaluate current and emerging technologies to select or recommend the best solutions for future-state architecture
• Experience effectively communicating complex security concepts to senior business leaders and non-technical stakeholders

• Experience securing enterprise cloud and software-as-a-service environments, including assessing architecture, data flows, identity, access, integrations, and security controls across third-party services
• Security architecture experience across major cloud platforms, including AWS, GCP, and Microsoft Azure, with an understanding of cloud-native security controls and shared responsibility models
• Experience evaluating software-as-a-service integrations, APIs, OAuth applications, service principals, application identities, and machine-to-machine authentication from a security and risk perspective
• Experience securing AI/ML and large language model-enabled applications, agents, and emerging AI capabilities, including risks associated with data access, permissions, external integrations, and third-party model dependencies
• Experience developing security control baselines, architecture standards, threat models, assessment frameworks, and reusable security patterns across cloud and software-as-a-service technologies
• Familiarity with established security frameworks and methodologies such as NIST, MITRE ATT&CK, STRIDE, OWASP, and zero-trust principles

#CTC