Technology Risk & Controls Lead - Senior Associate

JPMorgan Chase & Co.; Greater London; On-site; GBP 90,000 - 120,000; Full time

Job summary

J.P. Morgan is seeking a Technology Risk and Controls Senior Associate to lead Security Configuration Management across cloud, data center, and endpoint environments.

You will partner with engineering and risk teams to drive governance, standards, and measurable control objectives in a fast-paced, high-security culture. The role blends deep technical risk expertise with governance rigor, leveraging AI-enabled capabilities for risk analysis, evidence synthesis, and executive reporting, while

Qualifications

• Experience leading technology risk and cybersecurity controls in LOB context.
• Strong knowledge of AWS security controls and services.
• Ability to translate policy into implementable, testable controls.
• Proven track record in control testing, remediation, and executive reporting.
• Excellent stakeholder management across product, engineering, and risk teams.

Responsibilities

• LOB cyber risk leadership: primary risk contact for the LOB Applications and governance routines.
• Develop and tailor technical control objectives for Security Configuration Management across domains.
• Leverage AI capabilities to accelerate risk analysis and documentation; ensure data sensitivity compliance.
• Define measurable control performance metrics and integrate telemetry into governance dashboards.
• Draft executive-ready risk/control reports with auditability and traceability.
• Lead issue management and action-plans with evidence of remediation progress.
• Partner with engineering to assess control sufficiency against threat models and policies.
• Govern hybrid security posture across AWS, data centers, and endpoints.
• Guide integration of configuration drift/security tooling with GRC ecosystem.
• Provide strategic risk posture insights to technology leadership.

Skills

LOB-aligned technology risk

AWS security controls

translate policy into controls

control testing & remediation

stakeholder management

Education

CISM/CRISC/CISSP

Job description

J.P. Morgan is seeking a Technology Risk and Controls Senior Associate to lead Security Configuration Management across cloud, data center, and endpoint environments.

You will partner with engineering and risk teams to drive governance, standards, and measurable control objectives in a fast-paced, high-security culture. The role blends deep technical risk expertise with governance rigor, leveraging AI-enabled capabilities for risk analysis, evidence synthesis, and executive reporting, while