Tech Risk & Controls Lead

JPMorganChase; Bengaluru; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

JPMorgan Chase in Bengaluru, India is seeking a senior specialist to mitigate tech risks and uphold operational excellence in risk management. You will lead the controls framework for Kinexys tech org, coordinating with cyber teams and application owners to assess risks, test controls, and document evidence.

The role requires deep knowledge of GRC, cloud platforms, and IT security standards. You will collaborate with defense lines to collect artifacts, leverage AI tools for executive reporting,

Qualifications

• 10+ years in technology risk and controls assessment, support or management.
• Strong knowledge of information security architectures, CI/CD, SDLC, APIs.
• Experience across multiple cloud environments (AWS, Azure, Google).
• Familiarity with risk measurements and standards (NIST, ISO, SOC).
• Excellent technical writing and executive communication.

Responsibilities

• Executes robust controls framework for Kinexys technology org with KTRAC leads.
• Partners with Cyber and app owners on controls, risk assessments, testing, and action plans.
• Collaborates with Tech/Operate SMEs to close control gaps identified in audits and BAU projects.
• Keeps abreast of regulatory changes; develops control procedures aligned to standards.
• Understands JPM Technology control standards; implements controls per security standards.
• Acts as tech point for assessment responses for internal and 3rd party audits.
• Coordinates artefacts and evidence with 1/2/3 lines of defense and SMEs.
• Uses enterprise AI to accelerate risk evidence synthesis and executive reporting.
• Promotes AI-assisted reuse to streamline control testing and action tracking.
• Supports remediation activities and regulatory responses.
• Maintains audit/exam response tracking and timely stakeholder reporting.

Skills

Technology Risk & Controls

Cloud platforms

Risk assessments & audits

JIRA/Confluence/SharePoint

Agile methodologies

Tools

JIRA

Confluence

SharePoint

Job description

Job Description

Join our team to play a pivotal role in mitigating tech risks and upholding operational excellence, driving innovation in risk management.

Job Responsibilities

• Works with KTRAC leads to execute the robust controls framework for the Kinexys technology organization.
• Partners with Cyber and application owners to execute on controls agenda inclusive risk assessments, controls testing and evidencing, identification of control gaps and building/tracking/closing action plans.
• Collaborates with Tech/Operate SMEs to build processes, policies, procedures and programs to close control gaps identified during annual assessments and/or during BAU project development.
• Keeps abreast of regulatory changes and potential impact to controls environment. Thorough knowledge of GRC and key domains. Develop control procedures and ability to define controls
• Builds and maintains fundamental understanding of JPM Technology control standards. Develops and implement controls aligned to JPMC security standards
• Serves as tech point for tech assessment responses (inclusive of internal and 3rd party audits).
• Partners with 1/2/3 lines of defense and Tech SMEs to collect, track and disseminate artifacts and evidence requested by clients/customer/examiners/auditors
• Uses enterprise-authorized AI capabilities within the work environment to accelerate synthesis of risk/control evidence and draft executive-ready reporting, validating outputs and handling data according to sensitivity and security requirements
• Promotes reuse-first, AI-assisted approaches to streamline recurring control testing and issue/action-plan management routines, ensuring human review and alignment to auditability and regulatory expectations
• Assists in security gaps remediation activities as applicable. Collaborates with partners to provide written responses to regulatory requests.
• Develops and maintains tight audit and exam response tracking process. Provide timely and appropriate reporting to stakeholders

Required Qualifications, Capabilities, And Skills

• 10 + years industry experience including Technology Risk and Controls assessment, support and management.
• Demonstrated solid understanding of technology fundamentals and evolving/emerging technologies inclusive of Information Security Architectures and Controls, CI/CD, SDLC, APIs, Cloud platforms, Distributed ledger Technologies (blockchain) and Architectures such as Blockchain, DevOps, Enterprise Production Operations.
• Experience with project management of risk assessment and audits. Experience in multiple cloud environment (AWS, Azure and Google)
• Experience using JIRA, Confluence and SharePoint collaboration tools. Experience and comfort working in an Agile environment. Strong familiarity with risk measurements and information security standards (E.g. NIST, ISO, SOC etc).
• Proven track record of initiating policy and control improvements and driving programs and that enhance transparency, governance or control.
• Excellent technical writing capability and oral executive-level communications skills. Ability to anticipate and understand complex regulator and stakeholder requirements.
• Demonstrable skill to tailor complex regulatory issues into effective messages.
• Highly-motivated, well-organized self-starter with exceptional judgment and strong analytical, advisory, communication, and project management skills.
• Strong team player with ability to work closely with multiple constituents. Ability to maintain sound judgement under pressure when faced with imperfect information.
• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support technology risk and controls workflows with strong validation habits and awareness of data sensitivity.
• Ability to review and validate AI-assisted risk summaries and recommendations before use, escalating when uncertain and ensuring outcomes align to security, auditability, and regulatory expectations.

Preferred Qualifications, Capabilities, And Skills

• Certification: CISA, CRISC, CISSP, AWS or other security certification preferred

ABOUT US