Infrastructure Platforms PTX - Technology Risk & Controls Lead

Testing Site - JPMC; Greater London; On-site; GBP 90,000 - 120,000; Full time

Job summary

JPMorganChase in London seeks a Technology Risk & Controls Oversight professional within the Infrastructure Platforms PTX program. You will provide independent oversight to ensure robust risk management, collaborating with PTX operations to set standards and challenge risk decisions.

You’ll partner with technologists, assessment teams and data officers to drive governance, monitor control effectiveness, and maintain audit-ready evidence.

Qualifications

• Expertise in technology risk management, information security, or a related field.
• Familiarity with risk management frameworks and financial industry regulatory requirements.
• Strong knowledge of data security, risk assessment and reporting, governance.
• Ability to influence executive decisions and translate insights into business strategies.
• Experience governing complex infrastructure platforms or cloud deployments through formal lifecycle approvals.

Responsibilities

• Identify, quantify, communicate, and manage technology risk with root-cause analysis.
• Build partnerships with technologists, assessment teams, and data officers to drive collaboration.
• Oversee reporting and governance of controls, policies, and issue management for senior management insights.
• Monitor and evaluate control effectiveness; identify gaps and recommend improvements.
• Integrate PTX control requirements into testing plans and track remediation timelines.
• Curate and maintain audit-ready PTX artifacts and evidence repositories.
• Respond to regulatory and audit inquiries with timely information.
• Ensure correct control checks are embedded within the PTX process.

Skills

Technology risk management

Executive stakeholder management

Regulatory requirements

Information security

Cloud governance

Control testing

Evidence management

Audit-ready artifacts

Risk reporting

Education

CISM

CRISC

CISSP

Tools

NIST CSF

ISO 27001

SOX ITGC

FFIEC

OCC Heightened Standards

PCI DSS

Job description

Join us to shape the future of technology risk management and make a meaningful impact on our Infrastructure Platforms PTX program. You’ll collaborate with talented teams, influence senior leaders, and help set the standards for risk and controls. At JPMorganChase, you’ll find opportunities for growth, a culture of innovation, and the chance to make your mark in a dynamic environment. Bring your expertise and passion for technology risk - let's raise the bar together.

Job Summary:
As a Technology Risk & Controls Oversight professional in the Infrastructure Platforms PTX program, you will provide independent oversight and guidance to ensure robust risk management and control effectiveness. You will partner with the PTX operations team to establish standards, monitor adherence, and challenge risk decisions. Your insights will help senior leaders understand control effectiveness and residual risk. You’ll play a key role in governing issue management and maintaining audit-ready evidence. Together, we’ll drive a culture of accountability and continuous improvement.

Job Responsibilities:

• Identify, quantify, communicate, and manage technology risk, focusing on root cause analysis and actionable recommendations
• Build and maintain strong partnerships with technologists, assessment teams, and data officers to drive collaboration and shared goals
• Oversee reporting and governance of controls, policies, and issue management, providing senior management with clear insights
• Monitor and evaluate control effectiveness, identify gaps, and recommend enhancements to strengthen risk posture and compliance
• Integrate PTX control requirements into testing plans; track results, remediation timelines, and issue aging to reduce residual risk
• Curate and maintain audit-ready PTX artifacts, such as operational readiness checklists and evidence repositories
• Respond to regulatory and audit inquiries with accurate and timely information
• Ensure correct control checks are embedded within the PTX process

Required Qualifications, Capabilities, and Skills:

• Expertise in technology risk management, information security, or a related field, with a focus on risk identification, assessment, and mitigation
• Familiarity with risk management frameworks, industry standards, and financial industry regulatory requirements
• Strong knowledge of data security, risk assessment and reporting, control evaluation, and governance
• Ability to influence executive-level decision-making and translate technology insights into business strategies
• Experience governing complex infrastructure platforms or cloud deployments through formal lifecycle approvals (such as PTX or equivalent)
• Hands-on experience with control testing, evidence management, and issue management in a regulated environment
• Understanding of infrastructure security domains, including identity and access management, configuration baselines, vulnerability management, network segmentation, and monitoring
• Ability to synthesize technical control posture into concise executive narratives and risk decisions
• Exceptional stakeholder management and facilitation skills across technology, risk, audit, and product teams
• Industry-recognised risk certifications such as CISM, CRISC, or CISSP
• Familiarity with frameworks and regulations such as NIST CSF, ISO 27001, SOX ITGC, FFIEC, OCC Heightened Standards, and PCI DSS

Preferred Qualifications, Capabilities, and Skills:

• Experience with AI prompt engineering to enhance stakeholder engagement and process efficiency
• Additional industry-recognised risk certifications (CISM, CRISC, CISSP)
• Experience working directly with internal audit and external regulators on technology control assessments
• Background in platform engineering, SRE, or cloud governance
• Ability to develop control metrics and dashboards; proficiency with data analysis and reporting tools