Cyber Risk & Controls Lead – Security Configuration

Next Frontier Capital; Kentucky; Hybrid; USD 150,000 - 190,000; Full time

Job summary

JPMorgan Chase & Co. is seeking a Tech Risk & Controls Lead to shape the firm's security configuration management strategy across cloud, on‑premises, and endpoints. You will design and govern control frameworks, measure effectiveness, and drive continuous improvement with AI-assisted validation.

The role requires collaboration with architecture, GRC, and security engineering teams to ensure regulatory alignment and auditability while advancing security controls in a hybrid environment.

Qualifications

• Professional certifications such as Cloud Certifications (AWS Solutions Architect, AWS Security Specialist), CISSP, CISM, or GIAC.

Responsibilities

• Lead the development of technical control objectives and standards for Security Configuration Management and other Cyber domains.
• Leverages enterprise-authorized AI capabilities to accelerate cybersecurity architecture analysis and decisioning, validating outputs and handling data per sensitivity rules.
• Define measurable performance and effectiveness metrics for each control category and integrate telemetry and automation into governance dashboards.
• Promote AI-assisted approaches to streamline control testing and issue/action-plan management with auditability and regulatory alignment.
• Partner with security engineering and operations to assess control sufficiency against threat models and internal policies.
• Govern control implementation across hybrid environments (cloud, data center, endpoint) to maintain a consistent security posture.
• Guide integration of configuration drift monitoring tools with the GRC ecosystem to align with standardized objectives.
• Provide strategic insights into control posture to architecture and risk governance leadership for continuous improvement.
• Collaborate across teams to ensure security configuration aligns with enterprise standards, policies, and frameworks.
• Drive reuse-first adoption of AI-assisted security validation within SDLC/toolchain routines.

Skills

Security Configuration Management

Governance metrics

AI-enabled controls

Hybrid cloud security

Auditability & regulatory alignment

Tools

Archer

Job description

JPMorgan Chase & Co. is seeking a Tech Risk & Controls Lead to shape the firm's security configuration management strategy across cloud, on‑premises, and endpoints. You will design and govern control frameworks, measure effectiveness, and drive continuous improvement with AI-assisted validation.

The role requires collaboration with architecture, GRC, and security engineering teams to ensure regulatory alignment and auditability while advancing security controls in a hybrid environment.