Tech Risk and Controls Lead - Cloud Foundational Services - Governance

JPMorganChase; Greater London; On-site; GBP 70,000 - 100,000; Full time

Job summary

J.P. Morgan is seeking an experienced governance and risk professional to own executive-ready materials and lead end-to-end governance processes.

The role focuses on technology risk posture, control health, and open exposures, with accountability for enhancing reporting, action-plans, and stakeholder engagement. The candidate will define, monitor, and report KRIs and KPIs, synthesize complex inputs into clear insights, and leverage AI capabilities under data sensitivity and audit standards.

Qualifications

• Experience in technology risk, controls, governance, or a related field, including supporting senior leadership and control governance forums.
• Knowledge of control design and operating effectiveness, issue and action-plan management, and remediation validation.
• Familiarity with cloud risk and control concepts and public cloud environments.
• Experience defining, monitoring, and reporting control metrics, KRIs, and KPIs for senior audiences.
• Advanced PowerPoint skills with executive storytelling capabilities.

Responsibilities

• Own and deliver executive-ready materials for control governance forums, ensuring a clear, accurate view of risk posture and control health.
• Lead end-to-end meeting production: set timelines, gather inputs, track actions, maintain version control, escalate risks.
• Own issue and action-plan management: prioritize, define actions, track progress, validate remediation, challenge overdue owners.
• Define, monitor, and report control metrics, KRIs, and KPIs; surface trends and insights for senior management.
• Synthesize inputs into decision-oriented insights and storylines, highlighting risks, dependencies, and recommended actions.
• Provide high-level QA on metrics commentary, issue trackers, and risk updates; apply judgment to ensure scrutiny.

Skills

Executive storytelling

Technology risk and controls knowledge

Cross-functional leadership

Strong communication

Analytical capabilities

Quality assurance

Attention to detail

Tools

PowerPoint

Metrics reporting tools

AI tooling

Job description

• Own and deliver executive-ready materials (PowerPoint and written narratives) for control governance forums, ensuring they present a clear, accurate, and independent view of the product line's technology risk posture, control health, and open exposures.
• Lead the end-to-end meeting production process by setting timelines, requesting inputs, tracking actions, managing deadlines, maintaining version control, and ensuring materials are complete, accurate, and submitted on time while escalating delivery risks appropriately.
• Own issue and action-plan management as a discipline — driving prioritization, action-plan definition, progress tracking, and validation of remediation outcomes, and challenging owners where remediation is insufficient or overdue.
• Define, monitor, and report on control metrics, KRIs, and KPIs that measure control effectiveness, surfacing trends, thresholds breached, and the "so what" for senior management.
• Synthesize complex inputs into decision-oriented insights and storylines, articulating changes, impacts, key risks and controls, dependencies, decisions required, and recommended actions.
• Provide high-level review and quality assurance on metrics commentary, issue trackers, and risk and control updates, applying professional judgment to test whether they hold up to scrutiny.
• Maintain and enhance recurring reporting and meeting artifacts — templates, trackers, action logs, minutes, and follow-up items — while identifying opportunities for process improvement and standardization.
• Partner across lines of business and functions, and lead through influence, to strengthen governance routines and deliver effective oversight across the product line.
• Leverage enterprise-authorized AI and automation capabilities to accelerate the drafting, synthesis, and quality review of governance content — reducing manual effort while applying human validation and handling data in line with sensitivity and security requirements.

Job Description

• Own and deliver executive-ready materials (PowerPoint and written narratives) for control governance forums, ensuring they present a clear, accurate, and independent view of the product line's technology risk posture, control health, and open exposures.
• Lead the end-to-end meeting production process by setting timelines, requesting inputs, tracking actions, managing deadlines, maintaining version control, and ensuring materials are complete, accurate, and submitted on time while escalating delivery risks appropriately.
• Own issue and action-plan management as a discipline — driving prioritization, action-plan definition, progress tracking, and validation of remediation outcomes, and challenging owners where remediation is insufficient or overdue.
• Define, monitor, and report on control metrics, KRIs, and KPIs that measure control effectiveness, surfacing trends, thresholds breached, and the "so what" for senior management.
• Synthesize complex inputs into decision-oriented insights and storylines, articulating changes, impacts, key risks and controls, dependencies, decisions required, and recommended actions.
• Provide high-level review and quality assurance on metrics commentary, issue trackers, and risk and control updates, applying professional judgment to test whether they hold up to scrutiny.
• Maintain and enhance recurring reporting and meeting artifacts — templates, trackers, action logs, minutes, and follow-up items — while identifying opportunities for process improvement and standardization.
• Partner across lines of business and functions, and lead through influence, to strengthen governance routines and deliver effective oversight across the product line.
• Leverage enterprise-authorized AI and automation capabilities to accelerate the drafting, synthesis, and quality review of governance content — reducing manual effort while applying human validation and handling data in line with sensitivity and security requirements.

Required Qualifications, Capabilities, And Skills

• Experience in technology risk, controls, governance, or a related field, including supporting senior leadership and control governance forums.
• Working knowledge of technology risk and control concepts — control design and operating effectiveness, issue and action-plan management, and remediation validation — with the judgment to test whether risk and control representations hold up to scrutiny.
• Familiarity with cloud risk and control concepts and the risks specific to a public cloud environment.
• Experience defining, monitoring, and reporting control metrics, KRIs, and KPIs, and translating them into meaningful insight for senior audiences.
• Advanced PowerPoint skills with strong executive storytelling capabilities and the ability to translate complex technical topics into clear, senior-level narratives.
• Strong report creation and presentation skills, capable of speaking credibly to all levels of the organization.
• Demonstrated ability to lead cross-functional meetings and engage diverse line-of-business, control, and technology stakeholders.
• Exceptional organizational and execution skills, with the ability to manage multiple deliverables, tight deadlines, and diverse stakeholder groups.
• Strong analytical and quality assurance skills, including experience working with metrics, issue tracking, and reporting tools.
• Strong written and verbal communication skills, with the ability to build relationships, drive input collection, and navigate competing viewpoints.
• Experience using enterprise-authorized AI capabilities to support risk, controls, or reporting workflows — validating outputs before use, escalating when uncertain, and applying awareness of data sensitivity and auditability.
• Demonstrated adaptability, ownership, and a continuous improvement mindset while consistently delivering high-quality work.
• High attention to detail, strong professional judgment, and the ability to handle sensitive information with discretion.
• Strong control and governance mindset.

About Us

J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world's most prominent corporations, governments, wealthy individuals and institutional investors. Our first-class business in a first-class way approach to serving clients drives everything we do. We strive to build trusted, long-term partnerships to help our clients achieve their business objectives.

We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.

About The Team

Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we're setting our businesses, clients, customers and employees up for success.