Tech Risk and Controls Director - Audit

JPMorganChase; Glasgow; On-site; GBP 70,000 - 90,000; Full time

Job summary

JPMorganChase in Glasgow seeks a Technology Risk and Controls Lead to shape the tech risk strategy and enhance industry compliance. You will manage a team to implement risk management strategies and develop strong relationships with stakeholders.

Candidates should have significant experience in technology risk management and strong leadership skills. A Bachelor’s degree is preferred. The role emphasizes operational risk management in the fast-paced financial landscape.

Qualifications

• Significant experience in technology risk management focusing on risk identification, assessment, and mitigation.
• Demonstrated experience leading safe adoption of enterprise‑authorized AI capabilities.
• Proven ability to lead teams, manage cross‑functional projects, and influence executive-level decisions.

Responsibilities

• Develop and implement technology risk management strategies and processes.
• Lead strategic development of technology risk management in an evolving tech landscape.
• Establish relationships with stakeholders to ensure compliance with standards.

Skills

Technology risk management

Information security

Leadership skills

Data security

Communication

Education

Bachelor’s degree or equivalent experience

Job description

Job Description

Join a role that's central to our technological resilience, offering a unique opportunity to shape the firm’s tech risk strategy and enhance industry compliance. As a Technology Risk and Controls Lead within our Cloud Foundational Services Function, you will be passionate about operational risk management and control solutions for computing environments. You will partner with multiple disciplines, lines of business, regions, and locations to respond to evolving business requirements and emerging threats, leveraging your expert knowledge of today’s ever‑changing technology risk landscape and controls environment.

You will partner with process owners to respond to internal and external audit and regulatory requests for information, while ensuring senior stakeholders are kept updated on the risk posture for the organization. You will report directly to the Technology, Risk & Controls Portfolio Lead and be responsible for a small team.

Responsibilities

• Develop and implement technology risk management strategies, policies, and processes to identify, assess, and mitigate risks, and drive strategic projects and initiatives to enhance the firm’s technology risk management capabilities.
• Lead the strategic development and implementation of technology risk management in a dynamic, evolving tech landscape, ensuring cloud services are run safely and reliably.
• Identify and address emerging and upstream technology risk through risk event management, reporting, and action‑plan tracking, providing expert counsel to stakeholders.
• Establish and maintain strong relationships with internal and external stakeholders, including regulators and auditors, to ensure compliance with legal, regulatory, and industry standards.
• Manage reporting and governance of overall controls, policies, issue management, and measurements, providing insight to senior leaders into control effectiveness.
• Direct oversight and management of audits for Cloud Foundational Services.
• Support and advise process owners in managing operational risk and providing transparency to stakeholders.
• Ensure alignment with regulatory and firm‑wide control obligations and industry standards.

Qualifications

• Significant experience or equivalent expertise in technology risk management, information security, or a related field, focusing on risk identification, assessment, and mitigation.
• Demonstrated experience leading safe adoption of enterprise‑authorized AI capabilities within technology risk and controls workflows.
• Expertise in risk management frameworks, industry standards, and regulatory requirements relevant to the financial industry.
• Proven ability to lead large teams, manage cross‑functional projects, and influence executive‑level strategic decision‑making.
• Advanced knowledge of data security, risk assessment & reporting, control evaluation, design, and governance.
• Bachelor’s degree or equivalent experience.
• Strong leadership skills with exceptional communication and presence.
• Advanced knowledge of multiple IT control and project management practices, and experience working across large environments.
• Expertise in application and infrastructure high‑availability and resiliency architectures.
• Proficiency in information security domains, including policies, standards, access controls, regulatory compliance, risk and control governance and metrics, incident management, and vulnerability management.
• Understanding of public cloud environments.

We are an equal‑opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy, or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs.