Tech Risk & Controls Lead — AI, Compliance & Resilience

Aumni; Lower Blandford St Mary; On-site; GBP 90,000 - 140,000; Full time

Job summary

JPMorganChase is seeking a Tech Risk Lead to shape and oversee technology risk controls across Global Technology, TO, and IEM domains. You will translate complex risk findings into actionable business insights and partner with product and business teams to strengthen the firm’s risk posture.

The role emphasizes AI risk governance, regulatory compliance, and analytics-driven assurance, with a focus on implementing robust controls and executive-ready reporting across the enterprise.

Qualifications

• Experience in technology risk management with clear business impact and measurable outcomes.
• Strong knowledge of regulatory requirements (NIST, ISO, FFIEC, GDPR) and risk management frameworks.
• Expertise in AI risk governance, data security, and securing platforms/processes against AI threats.

Responsibilities

• Define and maintain technology control requirements with stakeholders, ensuring scope and measurable outcomes.
• Apply risk/control expertise in Change Management, Incident Management, and Event Management.
• Develop trusted relationships with BISOs, assessment teams, and product leads to enable cross-functional progress.

Skills

Regulatory compliance

Risk management frameworks

AI risk governance

Data security

Incident management

Change management

Event management

Data analytics

Executive-level influencing

AI risk threats & mitigations

Education

CRISC certification

Tools

LLMs

GitHub Copilot

Job description

JPMorganChase is seeking a Tech Risk Lead to shape and oversee technology risk controls across Global Technology, TO, and IEM domains. You will translate complex risk findings into actionable business insights and partner with product and business teams to strengthen the firm’s risk posture.

The role emphasizes AI risk governance, regulatory compliance, and analytics-driven assurance, with a focus on implementing robust controls and executive-ready reporting across the enterprise.