Mexico Tech Risk & Controls Director — Cyber CISO

JPMorgan Chase & Co.; Ciudad de México; Presencial; MXN 2.400.000 - 3.800.000; Jornada completa

Descripción de la vacante

JPMorgan Chase & Co. in Mexico City seeks a Tech Risk & Controls Director to shape and execute the firm’s technology risk management strategy.

You will identify, oversee, and mitigate risks, collaborating with Product Owners, business control managers, and regulators to maintain a comprehensive risk posture aligned with regulatory standards. Lead large, cross-functional programs, translate technical risk into business impact, and drive mitigations across IAM/PAM, data security, and incident

Formación

• 12+ years in technology risk management or related fields.
• Deep knowledge of risk frameworks and regulatory requirements in financial services.
• Proven ability to lead large cross-functional teams and influence executives.
• Experience in data security, risk reporting, and control governance.

Responsabilidades

• Develop and implement tech risk strategies, policies, and processes.
• Elevate emerging risk disclosures and provide expert counsel to stakeholders.
• Maintain relationships with regulators, auditors, and cross-functional leads.
• Govern reporting of controls, issues, and measurements with senior leadership.

Conocimientos

Technology risk management

Information security

Regulatory requirements

Stakeholder influence

Leadership of large teams

Risk identification

Data security

KRIs/KPIs reporting

Educación

Bachelor's degree

Master’s degree

Herramientas

NIST CSF

ISO 27001/27002

COBIT

IAM/PAM

Policy-as-code

Descripción del empleo

JPMorgan Chase & Co. in Mexico City seeks a Tech Risk & Controls Director to shape and execute the firm’s technology risk management strategy.

You will identify, oversee, and mitigate risks, collaborating with Product Owners, business control managers, and regulators to maintain a comprehensive risk posture aligned with regulatory standards. Lead large, cross-functional programs, translate technical risk into business impact, and drive mitigations across IAM/PAM, data security, and incident