Tech Risk and Controls Senior Associate (all genders)

JPMorgan Chase & Co.; Berlin; Vor Ort; EUR 70.000 - 90.000; Vollzeit

Zusammenfassung

JPMorgan Chase & Co. is seeking a Tech Risk and Controls Senior Associate in Berlin. This role involves managing cybersecurity risks, implementing governance controls, and collaborating with cross-functional teams. As part of the cybersecurity team, you will help strengthen operations and ensure compliance with regulations.

The ideal candidate has a bachelor’s degree, 3+ years of relevant experience, and knowledge of regulatory frameworks. Proficiency in German and English is essential.

Qualifikationen

• 3+ years relevant experience in technology risk management or related field.
• Knowledge of ISO27001, EBA Guidelines, DORA, and GDPR frameworks.
• Experience with AI in technology risk workflows.

Aufgaben

• Assess and monitor technology risks for compliance and best practices.
• Support implementation of controls with cross-functional teams.
• Engage in audits and ensure adherence to regulations.

Kenntnisse

Proficient knowledge in retail banking regulations

Strong communication skills

Analysis and risk mitigation

Experience with cloud and engineering practices

Excellent communication in German and English

Ausbildung

Bachelor's degree or equivalent

Jobbeschreibung

Tech Risk and Controls Senior Associate (all genders)

Berlin, Germany

• Job Identification 210729375
• Job Category Technology Risk & Services
• Business Unit Corporate Sector
• Posting Date 06/18/2026, 07:36 AM
• Locations Markgrafenstr. 19a, Berlin, 10969, DE
• Job Schedule Full time

Job Description

Excited by the opportunity to build innovative digital retail banking products and services in a start‑up environment, backed by one of the leading financial service providers worldwide?

Join us at JPMorgan & Chase Co. at our newest European hub, located in the heart of Berlin. In this exciting chapter of continued growth and expansion for JPMorgan & Chase, as a passionate Senior Tech Risk and Controls Senior Associate you will be responsible for providing guidance and solutions that assist in the management of cybersecurity and technology risk for the firm.

Working with our cybersecurity team, you’ll be at the forefront of innovation designed to strengthen our operations.

As a Tech Risk and Controls Senior Associate within Cybersecurity and Technology Controls at Chase in Berlin, you will contribute to the successful management of technology‑aligned aspects of Governance, Risk, and Compliance that assist in the management of cybersecurity and technology risk for the firm. Working with our cybersecurity team, you'll design and implement processes, governance controls and tools that safeguard the firm's computing environment. You will have the opportunity to explore a wide range of cybersecurity and technology risk management topics and engage directly with engineering, business, and other control functions to collaborate and solve problems that allow us to create trust at scale. Managing risks and overseeing cybersecurity and technology, you'll gain key insight into today's complex risk and regulatory landscape.

Job responsibilities

• Assess and monitor technology risks, ensuring compliance with firm standards, regulatory requirements, and industry best practices
• Support implementation of effective controls in collaboration with cross‑functional teams and stakeholders
• Evaluate the effectiveness of existing controls, identify gaps, and recommend improvements to mitigate risks and enhance the firm's risk posture
• Support regional oversight and governance by leveraging specific KPIs and KRIs.
• Engage in technology and security audits, and contribute to initiatives that ensure organizational practices adhere to regulations and standards.
• Evaluate regulatory and policy changes relating to cybersecurity and technology impacting the International Consumer Business.
• Interface with technology and other supporting corporate functions on an on‑going basis for business‑as‑usual risk activities, reporting, and project initiatives.
• Uses enterprise‑authorized AI capabilities within the work environment to accelerate synthesis of risk/control evidence and draft remediation recommendations, validating outputs and handling data according to sensitivity and security requirements.
• Promotes reuse‑first, AI‑assisted approaches to streamline recurring control testing and reporting routines, ensuring human review and alignment to governance standards.

Required qualifications, capabilities, and skills

• Bachelor's degree or the equivalent combination of education and relevant experience and 3+ years of total relevant work experience.
• Proficient knowledge in relevant regulations related to Retail Banking in Germany as well as the EBA Guidelines on ICT and Security Risk Management or the EBA Guidelines on Outsourcing Arrangements, and/or ISO27001, DORA, GDPR and NIST frameworks.
• Strong communication skills and ability to collaborate with high‑performing teams and individuals throughout the firm to accomplish common goals.
• Demonstrated ability to analyse complex issues, develop and implement risk mitigation strategies, and communicate effectively with senior stakeholders.
• Experience working with cloud and relevant modern engineering practices, such as containerization, access management, monitoring and/or CI/CD security.
• Demonstrated experience using enterprise‑authorized AI capabilities within the work environment to support technology risk and controls workflows with strong validation habits and awareness of data sensitivity.
• Ability to review and validate AI‑assisted risk summaries and recommendations before use, escalating when uncertain and following data handling expectations.
• Excellent communication skills in German and English.

Preferred qualifications, capabilities and skills

• 3+ years of experience or equivalent expertise in technology risk management, information security, or a related field, with a focus on risk identification, assessment, and mitigation.
• Certified in CISA, CISM, CRISC, CISSP, CCSP, or other industry‑recognized risk certifications.
• Proficient in IT risk management operating models, three lines‑of‑defense frameworks, integrated risk management practices, and/or risk intelligence capabilities.
• Experience operating within a regulated industry.

We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. Visit ourFAQs for more information about requesting an accommodation.