Lead Cybersecurity Architect

JPMorgan Chase & Co.; Houston (TX); On-site; USD 180,000 - 260,000; Full time

Job summary

JPMorgan Chase & Co. in Houston seeks a Lead Cybersecurity Architect to design high-impact security solutions for cloud-based software across functional areas. You will serve as a core technical contributor, shaping risk mitigation and secure design across projects.

Lead discussions, drive strategy, assess AI-enabled security outcomes, and ensure compliance with controls such as NIST. The role requires deep cloud experience, threat modeling, and collaboration with senior leaders.

Qualifications

• Formal training or certification in cybersecurity architecture is required.
• Experience delivering enterprise-level cybersecurity solutions and threat modeling.
• Proficiency with automation and CI/CD in the SDLC.
• Strong knowledge of agile methodologies, CI/CD, resilience, and security.
• Experience using enterprise AI capabilities to support cybersecurity workflows with proper validation.
• Proficiency in software applications and processes within technical disciplines (cloud, AI/ML, mobile).
• Deep knowledge of financial services or regulated industries and relevant software/applications.
• Practical cloud native experience (AWS preferred) and modern cloud architectures at scale.
• Ability to assess and validate AI-assisted security recommendations for security, resiliency, and auditability.

Responsibilities

• Engages technical teams and business stakeholders to discuss and propose technical approaches to meet current and future cybersecurity needs
• Defines the technical target state of their cybersecurity product and drives achievement of the strategy
• Identifies opportunities to eliminate or automate remediation of recurring issues to improve overall cybersecurity of software applications and systems
• Leads evaluation sessions with external vendors, startups, and internal teams to drive continuous improvement and assess cybersecurity design and technical credentials for use in existing systems and architecture
• Leverages enterprise-authorized AI capabilities within the work environment to accelerate cybersecurity architecture analysis and decisioning (e.g., risk identification and documentation), validating outputs and handling data according to sensitivity and security requirements.
• Leads communities of practice to drive awareness and use of new and leading-edge cybersecurity technologies
• Drives reuse-first adoption of AI-assisted security validation within SDLC/toolchain routines, improving control testing and remediation quality with traceability/auditability and resiliency expectations.
• Adds to team culture of diversity, opportunity, inclusion, and respect

Skills

Cybersecurity architecture

Threat modeling

CD/CI automation

Agile security

AI security validation

Cloud security

NIST controls

Leadership communication

Regulated industries

CISSP

CCSP

AWS Security

Job description

As a Lead Cybersecurity Architect in Cybersecurity Technology & Controls within JPMorgan Chase, you will be an integral part of a team that works to develop high-quality cybersecurity solutions for various software applications on modern cloud-based technologies. As a core technical contributor, you are responsible for carrying out critical cybersecurity architecture solutions by identifying, creating, and communicating risk, mitigation options, and solutions across multiple technical areas within various business functions in support of project goals.

Job responsibilities

• Engages technical teams and business stakeholders to discuss and propose technical approaches to meet current and future cybersecurity needs
• Defines the technical target state of their cybersecurity product and drives achievement of the strategy
• Identifies opportunities to eliminate or automate remediation of recurring issues to improve overall cybersecurity of software applications and systems
• Leads evaluation sessions with external vendors, startups, and internal teams to drive continuous improvement and assess cybersecurity design and technical credentials for use in existing systems and architecture
• Leverages enterprise-authorized AI capabilities within the work environment to accelerate cybersecurity architecture analysis and decisioning (e.g., risk identification and documentation), validating outputs and handling data according to sensitivity and security requirements.
• Leads communities of practice to drive awareness and use of new and leading-edge cybersecurity technologies
• Drives reuse-first adoption of AI-assisted security validation within SDLC/toolchain routines, improving control testing and remediation quality with traceability/auditability and resiliency expectations.
• Adds to team culture of diversity, opportunity, inclusion, and respect

Required qualifications, capabilities, and skills

• 5+ years of applied experience with formal training or certification in cybersecurity architecture
• Hands-on practical experience delivering enterprise-level cybersecurity solutions and controls along with threat modeling, threat assessments, and secure design reviews
• Proficiency in automation and continuous delivery methods and in all aspects of the Software Development Life Cycle
• Advanced understanding of agile methodologies such as continuous integration and delivery, application resiliency, and security
• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support cybersecurity architecture workflows with strong validation habits and awareness of data sensitivity.
• Demonstrated proficiency in software applications and technical processes within a technical discipline (e.g., public cloud, artificial intelligence, machine learning, mobile, etc.)
• In-depth knowledge of the financial services industry or regulated industries with deep knowledge of one or more software and applications
• Practical cloud native experience(AWS Preferred) and modern cloud architectures at scale
• Ability to assess and validate AI-assisted security recommendations before adoption, escalating uncertainty and ensuring outcomes align to security, resiliency, and auditability expectations.
• Experience implementing and operating security controls aligned to a comprehensive control catalog (e.g., NIST 800-53–aligned), including control design, evidence, and ongoing compliance

• Must be eligible to work on assignments subject to heightened security, identity, and/or additional background verification requirements and have effectively communicated with senior business leaders

Preferred qualifications, capabilities, and skills

• CISSP, CCSP or AWS Security

#CTC