Director, Security Configuration & Risk Controls

Testing Site - JPMC; Ohio; On-site; USD 180,000 - 240,000; Full time

Job summary

JPMorgan Chase is seeking a Tech Risk & Controls Director within Cybersecurity Technology and Controls to lead Security Configuration Management, governance, and measurement across cloud-native and on-prem environments. You will shape control standards and ensure standardized objectives across platform, network, endpoint, and application security.

You will partner with security engineering and operations to align controls with threat models and regulatory expectations, driving continuous

Qualifications

• 10+ years in cybersecurity controls architecture, security engineering, or operations leadership.
• Governing technical control frameworks across hybrid environments (AWS, Azure, on-prem).
• Knowledge of security toolsets including drift management, network segmentation, endpoint protection, and detection/response.
• Hands-on experience measuring control effectiveness via metrics, telemetry, and compliance automation.
• Strong communication and leadership with a track record of influencing technology strategy at scale.
• Familiarity with NIST 800-53/800-128, ISO, CIS, and zero-trust frameworks.

Responsibilities

• Lead development of technical control objectives and standards for Security Configuration Management and other Cyber domains.
• Define measurable performance metrics and construct governance dashboards with telemetry and automation.
• Partner with security engineering and operations to evaluate controls against threat models and policies.
• Govern control implementation across hybrid environments to maintain secure posture.
• Assess integration of drift monitoring tools with the GRC ecosystem to align with standards.
• Provide strategic insight into control posture to architecture and risk governance leadership.
• Collaborate across teams to ensure controls align with enterprise standards and frameworks.

Skills

Cybersecurity controls architecture

Security configuration management

Hybrid cloud governance

Metrics, telemetry & dashboards

Threat modeling & regulatory alignment

Communication & leadership

Tools

Archer

Puppet

Chef

Wiz

Evolven

Job description

JPMorgan Chase is seeking a Tech Risk & Controls Director within Cybersecurity Technology and Controls to lead Security Configuration Management, governance, and measurement across cloud-native and on-prem environments. You will shape control standards and ensure standardized objectives across platform, network, endpoint, and application security.

You will partner with security engineering and operations to align controls with threat models and regulatory expectations, driving continuous