Strategic Tech Risk & Compliance Lead

JPMorgan Chase & Co.; Jersey City (NJ); On-site; USD 120,000 - 180,000; Full time

Job summary

JPMorganChase is seeking a Tech Risk Assurance Lead to strengthen the firm's technology risk posture within Corporate Technology. You will design and oversee risk controls across multiple domains, partner with security and product teams, and synthesize risk evidence for executive reporting.

The role emphasizes governance, analytics, and the use of enterprise AI capabilities to accelerate risk assessments while ensuring compliance with regulatory expectations.

Qualifications

• 5+ years in tech risk assurance, with control design experience.
• Experience mapping risk and control requirements to business impact.
• Familiarity with NIST, ISO, FFIEC, GDPR frameworks.
• Experience using AI to support risk and control workflows.

Responsibilities

• Define and maintain technology control requirements with stakeholders.
• Apply risk and control expertise across Change Management, Incident Management, and Event Management.
• Build partnerships with security officers, assessment teams, and product leads.
• Prepare risk assessment reports and track findings to closure.
• Govern control effectiveness and recommend enhancements to improve risk posture.
• Develop analytics-driven assurance approaches for risk identification and mitigation.
• Leverage AI capabilities to synthesize risk evidence and draft executive reports.

Skills

Tech risk assurance

Regulatory compliance

Risk governance

AI risk governance

Data analytics

Education

CRISC certification

Job description

JPMorganChase is seeking a Tech Risk Assurance Lead to strengthen the firm's technology risk posture within Corporate Technology. You will design and oversee risk controls across multiple domains, partner with security and product teams, and synthesize risk evidence for executive reporting.

The role emphasizes governance, analytics, and the use of enterprise AI capabilities to accelerate risk assessments while ensuring compliance with regulatory expectations.