Security Configuration & Controls Lead (Hybrid/Cloud)

JPMorgan Chase; Plano (TX); On-site; USD 150,000 - 230,000; Full time

Job summary

JPMorgan Chase & Co. is seeking a Tech Risk & Controls Lead to shape the firm's security configuration management and governance across cloud and on-premises environments.

You will define control objectives, leverage AI capabilities to accelerate risk analysis, and drive measurable metrics for continual improvement. You will partner with security engineering and operations to ensure controls align with regulatory expectations, audit requirements, and enterprise standards, delivering insights to

Qualifications

• Professional certifications such as Cloud Certifications (AWS Solutions Architect, AWS Security Specialist), CISSP, CISM, or GIAC.
• Experience designing metrics and governance frameworks for Security Configuration Management, SOC, network security, or endpoint control domains.
• Strong working knowledge of GRC tools like Archer, infrastructure as code, and control enforcement in dynamic and hybrid environments.
• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support technology risk and controls workflows with strong validation habits and awareness of data sensitivity.
• Ability to review and validate AI-assisted risk summaries and recommendations before use, escalating when uncertain and ensuring outcomes align to security, auditability, and regulatory expectations.

Responsibilities

• Lead development of technical control objectives and standards for Security Configuration Management and other Cyber domains.
• Leverage enterprise-authorized AI capabilities to accelerate cybersecurity analysis and decisioning, validating outputs and handling data securely.
• Define measurable performance and effectiveness metrics for control categories and integrate telemetry into governance dashboards.
• Promote AI-assisted approaches to streamline control testing and remediation with auditability and regulatory alignment.
• Collaborate with security engineering and operations to evaluate control sufficiency against threat models and policies.

Skills

Cloud certifications

Governance frameworks

GRC tools

AI risk capabilities

AI risk validation

Tools

Archer

Terraform

CloudFormation

Job description

JPMorgan Chase & Co. is seeking a Tech Risk & Controls Lead to shape the firm's security configuration management and governance across cloud and on-premises environments.

You will define control objectives, leverage AI capabilities to accelerate risk analysis, and drive measurable metrics for continual improvement. You will partner with security engineering and operations to ensure controls align with regulatory expectations, audit requirements, and enterprise standards, delivering insights to