Cybersecurity Controls Lead (AI-Driven Risk & Governance)

JPMorgan Chase & Co.; Kentucky; Hybrid; USD 180,000 - 240,000; Full time

Job summary

JPMorgan Chase & Co. in the United States seeks a Tech Risk & Controls Lead within Cybersecurity Technology and Controls to shape the firm's security configuration governance across cloud and on-premises environments.

You will lead development of technical control objectives for Security Configuration Management, define metrics, and drive AI-assisted risk analysis and reporting, ensuring auditability and regulatory alignment.

Qualifications

• Professional cybersecurity controls design and governance experience.
• Experience designing metrics for Security Configuration Management and related domains.
• Strong knowledge of hybrid cloud/on-prem security architectures.

Responsibilities

• Lead the development of technical control objectives and standards for Security Configuration Management and other Cyber domains.
• Define measurable performance metrics and dashboards for control categories.
• Partner with security engineering and operations to evaluate control sufficiency against threat models and policies.
• Govern control implementation across hybrid environments (cloud, data center, endpoints).
• Collaborate with architecture, operations, and GRC teams to ensure alignment with standards and frameworks.

Skills

Cloud certifications

GRC tools (Archer)

Hybrid environments

AI-assisted security

Security configuration management

Tools

AWS Solutions Architect

AWS Security Specialist

CISSP/CISM/GIAC

Job description

JPMorgan Chase & Co. in the United States seeks a Tech Risk & Controls Lead within Cybersecurity Technology and Controls to shape the firm's security configuration governance across cloud and on-premises environments.

You will lead development of technical control objectives for Security Configuration Management, define metrics, and drive AI-assisted risk analysis and reporting, ensuring auditability and regulatory alignment.