Tech Risk and Controls Lead - Cloud Foundational Services - Governance

JPMorgan Chase & Co.; Greater London; On-site; GBP 90,000 - 120,000; Full time

Job summary

JPMorgan Chase & Co. seeks a governance specialist to own executive-ready materials describing the product line's technology risk posture and control health.

You will lead end-to-end meeting production, drive issue and action plans, and report on control metrics for senior leadership. You will synthesize complex inputs into clear narratives, QA metrics and risk updates, maintain governance artifacts, and collaborate across lines of business to strengthen oversight.

Qualifications

• Experience in technology risk, controls, governance.
• Ability to test risk and control representations.
• Familiarity with cloud risk and controls.
• Ability to translate metrics into senior insights.
• Ability to lead cross-functional meetings.
• Strong written and verbal communication.

Responsibilities

• Own and deliver executive-ready materials for control governance forums, ensuring clear, accurate views of risk posture and open exposures.
• Lead end-to-end meeting production: timelines, inputs, action tracking, version control, on-time delivery, escalate risks.
• Own issue and action-plan management: prioritize, define actions, track progress, validate remediation.
• Define, monitor, and report control metrics, KRIs, KPIs for senior management, surface trends and breaches.
• Synthesize inputs into decision-oriented insights, articulating risks, controls, dependencies, decisions and actions.
• Provide high-level QA on metrics commentary, issue trackers, risk updates, and test for credibility.
• Maintain and enhance recurring reporting artifacts: templates, trackers, minutes, follow-ups, identify process improvements.
• Partner across lines of business to strengthen governance routines and oversight across the product line.
• Leverage enterprise AI to accelerate drafting, synthesis, and quality review of governance content with validation and sensitive data handling.

Skills

Executive storytelling

Advanced PowerPoint

Report creation

Presentation skills

Cross-functional leadership

Risk governance

Project management

Analytics

Job description

• Own and deliver executive-ready materials (PowerPoint and written narratives) for control governance forums, ensuring they present a clear, accurate, and independent view of the product line's technology risk posture, control health, and open exposures.
• Lead the end-to-end meeting production process by setting timelines, requesting inputs, tracking actions, managing deadlines, maintaining version control, and ensuring materials are complete, accurate, and submitted on time while escalating delivery risks appropriately.
• Own issue and action-plan management as a discipline — driving prioritization, action-plan definition, progress tracking, and validation of remediation outcomes, and challenging owners where remediation is insufficient or overdue.
• Define, monitor, and report on control metrics, KRIs, and KPIs that measure control effectiveness, surfacing trends, thresholds breached, and the "so what" for senior management.
• Synthesize complex inputs into decision-oriented insights and storylines, articulating changes, impacts, key risks and controls, dependencies, decisions required, and recommended actions.
• Provide high-level review and quality assurance on metrics commentary, issue trackers, and risk and control updates, applying professional judgment to test whether they hold up to scrutiny.
• Maintain and enhance recurring reporting and meeting artifacts — templates, trackers, action logs, minutes, and follow-up items — while identifying opportunities for process improvement and standardization.
• Partner across lines of business and functions, and lead through influence, to strengthen governance routines and deliver effective oversight across the product line.
• Leverage enterprise-authorized AI and automation capabilities to accelerate the drafting, synthesis, and quality review of governance content — reducing manual effort while applying human validation and handling data in line with sensitivity and security requirements.

Required Qualifications, Capabilities, and Skills

• Experience in technology risk, controls, governance, or a related field, including supporting senior leadership and control governance forums.
• Working knowledge of technology risk and control concepts — control design and operating effectiveness, issueand action-plan management, and remediation validation — with the judgment to test whether risk and control representations hold up to scrutiny.
• Familiarity with cloud risk and control concepts and the risks specific to a public cloud environment.
• Experience defining, monitoring, and reporting control metrics, KRIs, and KPIs, and translating them into meaningful insight for senior audiences.
• Advanced PowerPoint skills with strong executive storytelling capabilities and the ability to translate complex technical topics into clear, senior-level narratives.
• Strong report creation and presentation skills, capable of speaking credibly to all levels of the organization.
• Demonstrated ability to lead cross-functional meetings and engage diverse line-of-business, control, and technology stakeholders.
• Exceptional organizational and execution skills, with the ability to manage multiple deliverables, tight deadlines, and diverse stakeholder groups.
• Strong analytical and quality assurance skills, including experience working with metrics, issue tracking, and reporting tools.
• Strong written and verbal communication skills, with the ability to build relationships, drive input collection, and navigate competing viewpoints.
• Experience using enterprise-authorized AI capabilities to support risk, controls, or reporting workflows — validating outputs before use, escalating when uncertain, and applying awareness of data sensitivity and auditability.
• Demonstrated adaptability, ownership, and a continuous improvement mindset while consistently delivering high-quality work.
• High attention to detail, strong professional judgment, and the ability to handle sensitive information with discretion.
• Strong control and governance mindset.