Mexico Tech Risk & Controls Director — Cyber CISO

JPMorgan Chase & Co.; Ciudad de México; On-site; MXN 2,400,000 - 3,800,000; Full time

Job summary

JPMorgan Chase & Co. in Mexico City seeks a Tech Risk & Controls Director to shape and execute the firm’s technology risk management strategy.

You will identify, oversee, and mitigate risks, collaborating with Product Owners, business control managers, and regulators to maintain a comprehensive risk posture aligned with regulatory standards. Lead large, cross-functional programs, translate technical risk into business impact, and drive mitigations across IAM/PAM, data security, and incident

Qualifications

• 12+ years in technology risk management or related fields.
• Deep knowledge of risk frameworks and regulatory requirements in financial services.
• Proven ability to lead large cross-functional teams and influence executives.
• Experience in data security, risk reporting, and control governance.

Responsibilities

• Develop and implement tech risk strategies, policies, and processes.
• Elevate emerging risk disclosures and provide expert counsel to stakeholders.
• Maintain relationships with regulators, auditors, and cross-functional leads.
• Govern reporting of controls, issues, and measurements with senior leadership.

Skills

Technology risk management

Information security

Regulatory requirements

Stakeholder influence

Leadership of large teams

Risk identification

Data security

KRIs/KPIs reporting

Education

Bachelor's degree

Master’s degree

Tools

NIST CSF

ISO 27001/27002

COBIT

IAM/PAM

Policy-as-code

Job description

JPMorgan Chase & Co. in Mexico City seeks a Tech Risk & Controls Director to shape and execute the firm’s technology risk management strategy.

You will identify, oversee, and mitigate risks, collaborating with Product Owners, business control managers, and regulators to maintain a comprehensive risk posture aligned with regulatory standards. Lead large, cross-functional programs, translate technical risk into business impact, and drive mitigations across IAM/PAM, data security, and incident